General

  • Target

    release1 (1).zip

  • Size

    18KB

  • MD5

    c68992259ff797a36c6b91222ea3c380

  • SHA1

    47acfe2e4c2d11072caa74627820e6c34e942fc9

  • SHA256

    409857fbe726ec8a71222081b5d2ff38f6949775913fa24c07aeb7f5779b7607

  • SHA512

    6fb221bed6c3f72b59fa8f9d08126eca4ad0e53c0666e7306bed4dd92a81496958c973a9aed01e4c4ffccd96c192002b5668424cb6bc98581ebc4b217d142e5d

  • SSDEEP

    384:dXzVvkXHU6UYIBQTYKAz5wfRVVAXIeQVCvtFYM/J9d2ivnE9SkKKQA7clPc:thvk39jTWz5wnWYlCf99vniQAIlE

Score
10/10

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discordapp.com/api/webhooks/1279852929825636517/7lX2aEO7lrNMoPEpMSmCdjN3hbJSXsL6I59yrTwyNVhO7kpK0CSks9fXRfhM5lPYJ0uz

Signatures

  • Mercurialgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • release1 (1).zip
    .zip
  • .gitignore
  • output.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections