General

  • Target

    output.exe

  • Size

    41KB

  • MD5

    55e027ed5c7bd86a809aa46ad7c7657a

  • SHA1

    da01b21defa1f45a196e529ea66bdd32415fbeb0

  • SHA256

    f8ac6fb08eadd5ecb4e305ee50f35e5ee6793ea6a3608b0e882b50982f9e02db

  • SHA512

    ba4bd0623c33252eabeaec160f7ab61df61199c68bc140a05fdcc21435958354ca7f0567012e40813ca377978ece3e6b451bb54a74ccb7d8afb85ef0ed46bfa8

  • SSDEEP

    768:1scaIiIqfT6ahzpDXswIuZkepWTj6KZKfgm3EheZ:ic1ofnhz8epWTOF7EcZ

Score
10/10

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/1270463374068809928/fGGuT6e4rAwTx_2FkvrD5SZnGfgMMxR-ZE3qrVMwC-SKUt9iUYQ2h2iASESJeXCnYP7_

Signatures

  • Mercurialgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • output.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections