General

  • Target

    7e88cea14d2fadcca9917b3337c3ed65_JaffaCakes118

  • Size

    42KB

  • MD5

    7e88cea14d2fadcca9917b3337c3ed65

  • SHA1

    ad0baa6441b559ede3f77a36a2d9a08e9659a6ec

  • SHA256

    be4a380b115f62eb10f3517e67abf674f93683c24593bad0bc8875689ad73855

  • SHA512

    1fe9adb556863a8dca16f5e88429535f96ba3c55747446b7939bf9eb5969cf06bae76988db8ff5e124ca0ef3ce492a20eec8590efa492ffadfed3245f2d8a4bf

  • SSDEEP

    768:upIm4lMmkpb9mpBuZkL26+Tj1KZKfgm3EhJ+:oAibIp7L26+TpF7Ez+

Score
10/10

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/893304875742552074/A1Ba_shZNkIoUCS2iMlR08WeNxn9bCR-qCyQzk_7RJUd4xTs54HnlGO3a5gdx5pUbuhV

Signatures

  • Mercurialgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7e88cea14d2fadcca9917b3337c3ed65_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections