Overview

overview

10

Static

static

10

RobloxSaver.exe

windows7-x64

10

RobloxSaver.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    RobloxSaver.exe

  • Size

    56KB

  • MD5

    661ca75edb4f7dc04682bb17409e999c

  • SHA1

    f8a8712c30e2bb207eabdd0b1767ea1c56ce7b8a

  • SHA256

    f52241d01e11eff438ab78843b57b4d333d798641f33ab02e61ed2dce3eb363b

  • SHA512

    1303ea0ca2daa9217ed7495cebc7d5208a3b994a4de60cc15ee5703fd8da1de32cd39dce0dbcbce0678cafb5ecd97c29b1b05145ed8e161e2cdb35b3a0616e28

  • SSDEEP

    768:VscaIyIqEemmpKYgGz3wiuZoe9WTjnKZKfgm3EhLPUqj0KQ9ewwkE:Cc1eBZve9WTrF7EFPUE059ew

Score
10/10
mercurialgrabber

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/1283135195800932403/BXkUOcYDwjASQ5HpWpdSVW3iN8KILAm_S5qz9RaGnY3XEUD_OZjdLAuocIg7qvZb3IJZ

Signatures

  • Mercurialgrabber family
    mercurialgrabber
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • RobloxSaver.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections