General

  • Target

    optimization.exe

  • Size

    68KB

  • MD5

    51d9d0a93081b537227b1a2ab44dc507

  • SHA1

    c2cbb6e76cc2a6b31065a5eb1bf19ee1600c0c58

  • SHA256

    5ec5f86f35a06554caedf23c766ad317fdc9eba5fb1242e063459d6d60dd805e

  • SHA512

    89664bfc3395584e1cc6a2264ecb2e7995750309eba0416ddcc51d55fe5e659e80e30c5b2ade372e27941921e755b5fad04a052fe88b82fcdb2c89298dbf820e

  • SSDEEP

    768:c2CZ9QLvnDylOcluZuLwnpTj9KZKfgm3Ehq5x/fK:c7AjnD9c7LwpTZF7EcPnK

Score
10/10

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/1277341597796925543/uBiSQjMIcZSjiE58SS7EsUdcpaONS8BCEIDgfigLN8z84blntDHVG1OHQj01TuM0t1rL

Signatures

  • Mercurialgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • optimization.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections