Extracted

• • Target

    main.exe

  • Size

    41KB

  • MD5

    1376ca3331a572011802d014bd08230d

  • SHA1

    e5b7e5b818f7782a417deef0e82ab90905b5e804

  • SHA256

    276680ca48b7ed3b2d66785994c277ed43489f794f33ab50bc228d3735fbf87d

  • SHA512

    8ad147272cdec3d745ef537b6dc6af1bf4f57595e83f9d2576120ceb050d3255ca7fca07937f1e87b0c59a33da6636c5ad188bd7fe6b2246022363f472a51a44

  • SSDEEP

    768:DscaIiIde8/o5M/BgwGuZAegWTjTQKZKfgm3EhbZ:Yc1Xe8hOegWTQF7ExZ

  Score

  10^/10

  mercurialgrabberspywarestealercredential_access

  • Mercurial Grabber Stealer

    Mercurial Grabber is an open source stealer targeting Chrome, Discord and some game clients as well as generic system information.

    stealermercurialgrabber

  • Credentials from Password Stores: Credentials from Web Browsers

    Malicious Access or copy of Web Browser Credential store.

    credential_accessstealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Legitimate hosting services abused for malware hosting/C2

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2