Overview

overview

10

Static

static

10

89962878a8...da.exe

windows7-x64

10

89962878a8...da.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    320651227efe3d69b041615c8458c09f.bin

  • Size

    18KB

  • MD5

    fc8be081ed0b9b18d6511478b81e82ce

  • SHA1

    452628a033c5223007adfda46ef6d046cb486724

  • SHA256

    1999aad890069c5b28c1860887a43197c4f0ad484b4717ebc4bfcc80a3331bb8

  • SHA512

    4a8ac960da5ae682c8f2ecacc4bb45e2042fa9a886ebc4504b330514851bfd49947a537c912fee5b947558da66b5fcf0901d88c80f4d7da21e888702e956eb44

  • SSDEEP

    384:U8KlecraaRkgJcoWUZXo7ssMjruzAiUkt0wXJwd4EzrnwfGfQobcO:U5lDvRkSZXoQs4riZuoGd4uniQhX

Score
10/10
mercurialgrabber

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/1257039082274422896/395iJabK3IVPpIWgS1k1UJ3FAnHY2lWIwRcLWCTN1yTDR63aYdeLgcVrc81Dut5tbfV4

Signatures

  • Mercurialgrabber family
    mercurialgrabber
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 320651227efe3d69b041615c8458c09f.bin
    .zip

    Password: infected

  • 89962878a82a8cf7b81c966f184a2c0f68c2336f92f9c57a2044cfe40fd540da.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections