Overview

overview

10

Static

static

10

9c7684f806...18.exe

windows7-x64

10

9c7684f806...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9c7684f80695519620fe805da4cae6c8_JaffaCakes118

  • Size

    42KB

  • MD5

    9c7684f80695519620fe805da4cae6c8

  • SHA1

    79cab6b7749b02b850d472ac2e0e4f0583b3262a

  • SHA256

    13ac55c229f32a5a0339ae7d6fb117076df82030c0307e6b953456b87a6135c7

  • SHA512

    722c26d15e923b9b64face3c2760cf0610276db99398447b1a335fbf997bd5ee76587c50606e6a9587e72c376f0d762227e823bcd240b0a68ea73c1abe8d8abe

  • SSDEEP

    768:hWHasNAu98bTEehX0W9MuZOLSqTjZKZKfgm3Ehs5:mAuubTEQz94LSqTVF7E+5

Score
10/10
mercurialgrabber

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/894085995165786132/_902vX2jmL-1bLVCDtEzeOkbrnntW1VNCnQsoiDf8BiCHp5znLPn0QbnHTh9qLcCk5Rm

Signatures

  • Mercurialgrabber family
    mercurialgrabber
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9c7684f80695519620fe805da4cae6c8_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections