Overview

overview

10

Static

static

10

03-08-2024...xB.rar

windows11-21h2-x64

3

ValoTestAn...D!.txt

windows11-21h2-x64

3

ValoTestAn...IS.bat

windows11-21h2-x64

10

ValoTestAn...ig.ini

windows11-21h2-x64

3

ValoTestAn...es.exe

windows11-21h2-x64

3

ValoTestAn...er.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    03-08-2024_hYQnEY98kzONexB.rar

  • Size

    380KB

  • MD5

    1f07cc38bc38349203b8cdc78572abe0

  • SHA1

    a91a541c697818bf3201a526919a20b72516fd24

  • SHA256

    98bb2f2e1e052cdc02ec4681bce66c95b72efb200d0c761e0e90e421d5887586

  • SHA512

    81e140821385223e8474c514c2f20aeb6f1ae2c8396d380472654c1caf65365b73bd5759b883d4d8ca4f77f932b72f466098777bcf7c66b93f70cc88204d6dc1

  • SSDEEP

    6144:yOXp7CS/4nU/wbrSqU7ewpvik/9Sr2wbDnc68gl1BlXtSgykbex8OPeC:yO87nUIfSJdpqk/oTRtSRkaBz

Score
10/10
mercurialgrabber

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/887304484844339250/sTQt9knbeiUf2bJPMZ4uxOEZ2mFmxtbw1S3JZvhKpMU-hSQtSzNllJidmjM8oJmI2wpt

Signatures

  • Mercurialgrabber family
    mercurialgrabber
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 03-08-2024_hYQnEY98kzONexB.rar
    .rar
  • ValoTestAndProof_Shift_trigger/!TUTORIAL! - READ!.txt
  • ValoTestAndProof_Shift_trigger/RUN THIS.bat
  • ValoTestAndProof_Shift_trigger/config.ini
  • ValoTestAndProof_Shift_trigger/files.exe
    .exe windows:5 windows x86 arch:x86

    48e414e431433a62713440d22abb8343


    Headers

    Imports

    Sections

  • ValoTestAndProof_Shift_trigger/mapper.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections