General

  • Target

    dick.exe

  • Size

    41KB

  • MD5

    ee6c51aa4528946cdd658c39924fede7

  • SHA1

    cfb39ccd0335939552c9bd039ef57db4fdbf46a1

  • SHA256

    be21e908b71716accb548d4087033321d6a9aed6aa0cae3e51ad9a0b4b8fc750

  • SHA512

    c5c50fb3f3ecf42dca903b5d79975ba86c236f85092ac750ae9c33125799b88a80ecfcbd5bdbbd33048f9dd3534fadb681db54ca2f76dbef78359b58b8aefbff

  • SSDEEP

    768:ca2ORgoat5b0nuZGLqwTjfKZKfgm3EhSH:dplLqwTjF7EIH

Score
10/10

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/1265745201981423616/iM82MxICrDVrvz1mdITQtz3DfzkhcwmfxWl438ReBQZxkcAAdGdNbo191wrdJRoCoTOJ

Signatures

  • Mercurialgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • dick.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections