General

  • Target

    loader.exe

  • Size

    41KB

  • MD5

    9603ee63c2c1d30adf5417016649633a

  • SHA1

    56483eb72019036eab4fce5e424bfeedb4955c4a

  • SHA256

    55ea1dea72c70efd7093d5736927632e9d23a591eef4898bf9f9a16aa6d90445

  • SHA512

    fbd17bd96a93d840206edb30ec7724b261db7a37dee078745cbc22e1181f6c60ed24ca1f99c78b22d73773ec607c17ad27234a093f8469e9f718442d202ceb7c

  • SSDEEP

    768:/scaIiIqfT6aGpDXswguZkezWTj5KZKfgm3EhKB:0c1ofnGEezWTdF7EsB

Score
10/10

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/1262819781422088224/NaI1AFbKRUWv3kXnUTBmnMjHn4JHCh0dAY8B9SChoF6bEkTWpaAPUv-NOewDF6d0Wb6Y

Signatures

  • Mercurialgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • loader.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections