Overview

overview

10

Static

static

10

winexp.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    winexp.exe

  • Size

    41KB

  • MD5

    21a21bb1d9322ae71436daa198cf8ef4

  • SHA1

    f1a34749fe45bf4d01f2fabf700a1d134300fc64

  • SHA256

    9dcbc998b0331876e6e1b75fb7a0194dda96d286594c95164020ed7740a90c51

  • SHA512

    fd9ea6ddb7b4b13120b174fc382668ea27cc7003f463c17e81dda0c72986070ef770b46b21bcd2757733cfae4760ba8673330e1502c26eb232f16a55b636f087

  • SSDEEP

    768:AscaIiIqfT6acpDXswEuZseeWTjLMKZKfgm3EhVD:3c1ofnckeeWTsF7ELD

Score
10/10
mercurialgrabber

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/1285311347256725576/tyLCCzi8G5LtuHGxSFah1PosAjhMWDRh0iSyBBhaaIKMcb4pzn4VxCQzgH3ih1nyaS4X

Signatures

  • Mercurialgrabber family
    mercurialgrabber
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • winexp.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections