General

  • Target

    e98fb1692fc21fa4742d37e6386ad96a39a230905b56884e8192fbf641816375

  • Size

    42KB

  • MD5

    6ef6b24a8a5be8c946c4c5e61bec578c

  • SHA1

    312df77bf61dd7ace8b5228d711a84f46adf3297

  • SHA256

    e98fb1692fc21fa4742d37e6386ad96a39a230905b56884e8192fbf641816375

  • SHA512

    1e6986bfc96633e3390d5b09099dc6533cb58d82bbb6a7a21f572dc097b7239272c7b5c72e9818fdf0c3da557a7080479926edb49dadca38f2aadf288fef5f05

  • SSDEEP

    768:btOpJpBZ6aZpDtsuuZ2LO0TjBKZKfgm3EhE5:Q1ZPsmLO0T1F7EO5

Score
10/10

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/1268904005900439704/aHcJRyaA1zmbznz3mFrqjZp_E0F9X_WvjA0KZFzhCghjBCchrAC64v7Qoe97xeUSXuao

Signatures

  • Mercurialgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e98fb1692fc21fa4742d37e6386ad96a39a230905b56884e8192fbf641816375
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections