Overview
overview
7Static
static
3Mercurial-...in.zip
windows10-2004-x64
1Mercurial-...in.zip
windows11-21h2-x64
1Mercurial-...er.exe
windows10-1703-x64
7Mercurial-...er.exe
windows11-21h2-x64
7Mercurial-...DME.md
windows7-x64
3Mercurial-...DME.md
windows11-21h2-x64
3Mercurial-...ts.txt
windows7-x64
1Mercurial-...ts.txt
windows11-21h2-x64
3Static task
static1
Behavioral task
behavioral1
Sample
Mercurial-grabber--main.zip
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
Mercurial-grabber--main.zip
Resource
win11-20240802-en
Behavioral task
behavioral3
Sample
Mercurial-grabber--main/Mercurial grabber.exe
Resource
win10-20240404-en
Behavioral task
behavioral4
Sample
Mercurial-grabber--main/Mercurial grabber.exe
Resource
win11-20240802-en
Behavioral task
behavioral5
Sample
Mercurial-grabber--main/README.md
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
Mercurial-grabber--main/README.md
Resource
win11-20240802-en
Behavioral task
behavioral7
Sample
Mercurial-grabber--main/requirements.txt
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
Mercurial-grabber--main/requirements.txt
Resource
win11-20240802-en
General
-
Target
Mercurial-grabber--main.zip
-
Size
2.9MB
-
MD5
8d8b7c06b22e93196d78738e93b0faa2
-
SHA1
df1164041993ad79c349a83d4afd7da48c84f54b
-
SHA256
6c50c6b415b6e2f0910cc6ba1f6e7a0bff3905e001eb1e992d94835588a3b71d
-
SHA512
371e7a6576b3e96bb0ded4bea8c931f379cdc3fca4aefcce8838eee95c11533fea0aaa5af31b171d02d2604009e1d77cd19fb2f621177205f76c62da74b6dfc7
-
SSDEEP
49152:mcwRrgXZwQiMXzl7aabgRFfB/ZeEGk25cHBUbPhuzesdrahn2+X6kDXKXxt1vijz:mcwVgX/XzsaKpB/wfkrHBUrzhPQZUnMI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Mercurial-grabber--main/Mercurial grabber.exe
Files
-
Mercurial-grabber--main.zip.zip
-
Mercurial-grabber--main/Mercurial grabber.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 106KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Mercurial-grabber--main/README.md
-
Mercurial-grabber--main/requirements.txt