Overview

overview

10

Static

static

10

5ed037dc09...18.exe

windows7-x64

10

5ed037dc09...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5ed037dc09a7e491d10abb6b145dcc4a_JaffaCakes118

  • Size

    41KB

  • MD5

    5ed037dc09a7e491d10abb6b145dcc4a

  • SHA1

    9612709b6ada303343ef70dfeff22c57c37b4f48

  • SHA256

    50f9641d40ec65144962c2b3413008fb84206789392cca8dfd0fbfc67d3f8c9c

  • SHA512

    643d37587ae35ae00505bd104bd87071f44e72f65a8cc16ef24c08ef5b1dca6c552c6959ce31448db9ee495d3669639c750fec6d2590ec71e3508ec489b8c7e8

  • SSDEEP

    768:vscG4AZOA/gB1w9zuZ+e3WTjgKZKfgm3EhSf:EckJgBge3WTMF7Ekf

Score
10/10
mercurialgrabber

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/874250375874629673/S_RF-uZTHriSpuDv5nn-kEKcOozJiO939ph_60RHzZ4x1n2lxIGHKSD0NpZRTs9B5RhC

Signatures

  • Mercurialgrabber family
    mercurialgrabber
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5ed037dc09a7e491d10abb6b145dcc4a_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections