General

  • Target

    136ce1f5f2299e4f8e3fb5e30dc0f149.exe

  • Size

    41KB

  • MD5

    136ce1f5f2299e4f8e3fb5e30dc0f149

  • SHA1

    29460774476d4667f63a6abb5bcb29f603471589

  • SHA256

    68f01e0d0f2bf1705c62ad8b94d4454d2646aced975b56e593c59a58e4b0ccca

  • SHA512

    af5d31d017c155bb0043603de76a8a822a25d8a573d9bc87c549fd823c0ab33d42ede18dafb142cc6a3121441767075cd6d61c08cffa458fa91fd493b3cee4d9

  • SSDEEP

    768:2scaIiIqfT6ajQdpDXsw7uZ7ejWTjvBKZKfgm3Ehzm:Vc1ofnI6ejWTbBF7EBm

Score
10/10

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/1241448843959079032/HMgH2saTiZy9AeNAE4DxehoML8c_SJy5ub_JvUcxJk3wiNt3MyPnFu2k8elCddlfbFXT

Signatures

  • Mercurialgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 136ce1f5f2299e4f8e3fb5e30dc0f149.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections