Overview

overview

10

Static

static

10

6ba867420e...18.exe

windows7-x64

10

6ba867420e...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6ba867420e102e3459cf65b9fdf49da2_JaffaCakes118

  • Size

    197KB

  • MD5

    6ba867420e102e3459cf65b9fdf49da2

  • SHA1

    619c4d83e8d8311b80c9278ee89d8c98570b85d3

  • SHA256

    74cd917620b9b29722b1b54e631eeae9ed4ae7692b20d05077e7c7a303ba5f68

  • SHA512

    6edd329f4370a5ecc8089a28f68f26f2cb02e2b4a94dc0fd026709666266a3ffd9c4ec7f5017b151b2bee5e08909a35a6b5b5cb99ec75b80463f8917d53f3c90

  • SSDEEP

    1536:vJGSoeLR9TOF7Ee2/DVasc/D9Pc6fwyIC:vJseLPTOF7Ee2/DVasc/D906fwyIC

Score
10/10
mercurialgrabber

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/891741010659532870/Fb4tVm91Py8JGE7gysQQ8S7QnkoNe6K-smtrNqOVS36LnT2F-lYVW7i9GZOHJcE2QjVT

Signatures

  • Mercurialgrabber family
    mercurialgrabber
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6ba867420e102e3459cf65b9fdf49da2_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections