General

  • Target

    d7f4ceb2e023f51d23cafa4a30da811f3abb864d6c938a36f9326f4c16cac7f3

  • Size

    108KB

  • MD5

    1d57d1eca8ab1bf9fce8c2acdf4ea3e1

  • SHA1

    04c9de89db5b5054d7ce32a908b7f0755222b5f8

  • SHA256

    d7f4ceb2e023f51d23cafa4a30da811f3abb864d6c938a36f9326f4c16cac7f3

  • SHA512

    ca56337c05a835fe663e03acce20e4effbb0f19752781009ba6d22afd0e01c38a7afc49604b8d72188ac4b227f7063cd0a66a6c6578258c9528964fda1672b33

  • SSDEEP

    768:v/WtmlL9ra82jeuZ7LPiTjjvKZKfgm3EhutCC2csDjnFBR/y:W8lL9rcbLPiT/vF7EctCVcsDjFBRq

Score
10/10

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/1261474088715681844/6ilYIvPPU2c2NVjM7RrEeVsbmo3iDhKyRwlRyw7Bxp1N4YDGJ0J-WRHDuY4sSd0hQSb6

Signatures

  • Mercurialgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d7f4ceb2e023f51d23cafa4a30da811f3abb864d6c938a36f9326f4c16cac7f3
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections