General

  • Target

    SynapseX.exe

  • Size

    162KB

  • MD5

    9f0f9363f4af30834830f79e6f4b106d

  • SHA1

    fe1c65aee19fdb22e01ef6b8085e9ef7f129a198

  • SHA256

    31dbefdd19d9ed9d055841fba2677de2a4cc70085b0684398b36a03d542d402a

  • SHA512

    85b9475811a88ee3b3210a81ee921a0e57c715fc86cc9e4e1ca53f2d0413ca68f31fe7af9706ac18282e4f1c6a4fa2c3df03d02a3aeda20dd44dcb6d32bd1645

  • SSDEEP

    3072:CCAeqTJF7ExgiVY8sBSPxCn7ksSKn/H+:DA+8+C7dSWv+

Score
10/10

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discordapp.com/api/webhooks/919253082930561024/1ZkyHALR4HtVMamDsSo-GHiRzv_ZdttSm1dB3hEFn814XR0ZI9vUjPFpkcrUkoXxQ7nt

Signatures

  • Mercurialgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • SynapseX.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections