General

  • Target

    PyGrabber.BETA.zip

  • Size

    20KB

  • MD5

    5a1cec2179fcc1a5d8abe6dd854f024f

  • SHA1

    fcddfca666c9c109b3e6441f526fdbe9d1308950

  • SHA256

    060eeba1a6af6ae88083fd6b7756b7e5892e89e94dd0317757649584386b1b2d

  • SHA512

    e92a7941052bd83ee9d7689d643e78a6857e735f05ce449a9faad858b6076f69ca3387472c452455ea2b2c10c4ec720a713433d05677e5f07dd9809e79704a13

  • SSDEEP

    384:4bL4cnRhYxtBeVL9hDrnMD9oeATHi88nPzuZZRR/Slv8Gz4nT7aFdH4zQM:qM18VfDbvF8PzubRR/36467fM

Score
10/10

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/989605498150092830/I3sJcFFWbTWwsAi6ly8l_n-AJ0DbeIeGdUt5rJnglsUWr5gsPaHLpVae-SL6M8scYn3s

Signatures

  • Mercurialgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • PyGrabber.BETA.zip
    .rar
  • PyGrabber BETA/PyGrabber.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • PyGrabber BETA/README.MD
  • PyGrabber BETA/Setup.bat
  • PyGrabber BETA/req.py