Extracted

• • Target

    Kaspesky_Internet_Security.exe

  • Size

    42KB

  • MD5

    b9bd550b2eae29c5f797b5e583747b79

  • SHA1

    272b4220378891b53c6b3ec686863d6746cd1bdd

  • SHA256

    db32a1602118760a9565a94f1bdc24c9320eda2fcc51dd24f862bff19aaed6b3

  • SHA512

    2425c3b734c3604b77fb08e4d8ddce31954db864b091a17d95fa8a307c67b5b65a377d9f490eaf759dcba656e3122472c8367865d78714b41d98fe6f740fc578

  • SSDEEP

    768:AgZ8bWpjG72zFeQuZFLBTTjBKZKfgm3EhwnH:AfCjG7VDLBTTVF7EqnH

  Score

  10^/10

  mercurialgrabberevasionstealer

  • Mercurial Grabber Stealer

    Mercurial Grabber is an open source stealer targeting Chrome, Discord and some game clients as well as generic system information.

    stealermercurialgrabber

  • Looks for VirtualBox Guest Additions in registry

    evasion

  • Looks for VMWare Tools registry key

    evasion

  • Checks BIOS information in registry

    BIOS information is often read in order to detect sandboxing environments.

  • Maps connected drives based on registry

    Disk information is often read in order to detect sandboxing environments.

  behavioral1