Overview

overview

10

Static

static

10

balslacke.exe

windows7-x64

10

balslacke.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    balslacke.exe

  • Size

    41KB

  • MD5

    4ed542cf60b10e710aa5adb9793b6bfd

  • SHA1

    cdf8b4fb9a09fd7a1f80378a7d017f54ea0a3e5f

  • SHA256

    91c6f2cb0bb3f42b7f29a6c0506b5f87cbdd6e26d94c10025708763ac878aeb4

  • SHA512

    e91807529f75be869683137c8a67d031eb3400672799297c11b803b087416c93851e097cea10bd49ec30cbee1d7f04cda5432b789d615c92474f11aa1a852ed4

  • SSDEEP

    768:NscaIyIqaTQSwEwuZVeeWTjeKZKfgm3EhYI:qc17HeeWTqF7EGI

Score
10/10
mercurialgrabber

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/1269070622605050000/Alm3LpQER4yXaeST2dPkVqDgNz6KnoHyX9oQmOPNmFK4hj3_I71Pc-4aUhn6_Vc2qx1M

Signatures

  • Mercurialgrabber family
    mercurialgrabber
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • balslacke.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections