General

  • Target

    Bilder Alina.exe

  • Size

    42KB

  • MD5

    bbc07e7f2983f25e8b0ce1035b817ca6

  • SHA1

    585d9ffe9e72238c88c70a5b14d37386c42f4402

  • SHA256

    640ef4bd63a995a853cc37fa2943718892af6ed6e5f6e45b128fd8291e0e279b

  • SHA512

    2e393abb95c1f0d479e3c7eeb1b06d20e4e08e9e3c6397b15882d3745a122ba5a166c93b5ebb023aa3185b2bd9b869aad30fae07796fcc3fbbfaa1f31f3d99ba

  • SSDEEP

    768:UCV+LvnDylOcLuZ4LM+Tj3KZKfgm3Eh0D:4jnD9cTLM+TjF7EiD

Score
10/10

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/908796186750758912/Ktr-RRsUHVpyWYRHOXiOfL3CSmn-60ZObmFke6maRM5X1JWS9IFyH5Lp5xofy7Idpi9m

Signatures

  • Mercurialgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Bilder Alina.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections