Overview

overview

10

Static

static

10

Working.exe

windows7-x64

10

Working.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Working.exe

  • Size

    41KB

  • MD5

    3610bdbb6add1be985fb1a6cf7199704

  • SHA1

    1a626ee0f58895c520eda721de3b731ce82fa90b

  • SHA256

    64f1ab05d95128881717022f07285faaed82fa80b42294a69f8b53c6bc346b26

  • SHA512

    7ec81fca47944e817ac9185daf04f0fd5971152bc729145f1945498cbbeb3841fdf7cfd0064e1232e10c48741747c99a6dcfceaeb72ff15ef8acf6ab8007ee4b

  • SSDEEP

    768:iscaIiID3mbMABWawWuZYeOWTjiKZKfgm3Eh4D:xc1N3mM8WCeOWTWF7ECD

Score
10/10
mercurialgrabber

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/1236415054371356683/OrDTmRfTas_XmLRrsqnKyll68rab1NgMyysZ-Wk0_5lhUZv-RzcJAZFh2Z8FO8rzMZiK

Signatures

  • Mercurialgrabber family
    mercurialgrabber
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Working.exe
    .exe windows:4 windows x86 arch:x86

    Password: h

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections