371edb664c31555dac5e695b0f7286115dd94b380c188948bde2f167f030a7d3

Submit
Reports

Overview

overview

Static

static

Mercurial ...al.exe

windows7-x64

Mercurial ...al.exe

windows10-2004-x64

Mercurial ...config

windows7-x64

Mercurial ...config

windows10-2004-x64

Mercurial ...rs.xml

windows7-x64

Mercurial ...rs.xml

windows10-2004-x64

Mercurial ...ner.cs

windows7-x64

Mercurial ...ner.cs

windows10-2004-x64

Mercurial ...rm1.js

windows7-x64

Mercurial ...rm1.js

windows10-2004-x64

Mercurial ...m1.vbs

windows7-x64

Mercurial ...m1.vbs

windows10-2004-x64

Mercurial ...csproj

windows7-x64

Mercurial ...csproj

windows10-2004-x64

Mercurial ...ram.cs

windows7-x64

Mercurial ...ram.cs

windows10-2004-x64

Mercurial ...nfo.cs

windows7-x64

Mercurial ...nfo.cs

windows10-2004-x64

Mercurial ...er.vbs

windows7-x64

Mercurial ...er.vbs

windows10-2004-x64

Mercurial ...es.vbs

windows7-x64

Mercurial ...es.vbs

windows10-2004-x64

Mercurial ...ner.cs

windows7-x64

Mercurial ...ner.cs

windows10-2004-x64

Mercurial ...ttings

windows7-x64

Mercurial ...ttings

windows10-2004-x64

Mercurial ...s.licx

windows7-x64

Mercurial ...s.licx

windows10-2004-x64

Mercurial ...Gcm.js

windows7-x64

Mercurial ...Gcm.js

windows10-2004-x64

Mercurial ...ser.js

windows7-x64

Mercurial ...ser.js

windows10-2004-x64

Analysis

max time kernel
95s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
19-11-2024 11:26

Sharing

Copy URL

Twitter E-mail

Static task

static1

mercurialgrabber

2 signatures

Behavioral task

behavioral1

Sample

Mercurial Grabber.v1.03/Mercurial.exe

Resource

win7-20241010-en

mercurialgrabber evasion stealer

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

Mercurial Grabber.v1.03/Mercurial.exe

Resource

win10v2004-20241007-en

mercurialgrabber evasion spyware stealer

windows10-2004-x64

12 signatures

150 seconds

Behavioral task

behavioral3

Sample

Mercurial Grabber.v1.03/Mercurial/App.config

Resource

win7-20240903-en

discovery

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral4

Sample

Mercurial Grabber.v1.03/Mercurial/App.config

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

Mercurial Grabber.v1.03/Mercurial/FodyWeavers.xml

Resource

win7-20240903-en

discovery

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral6

Sample

Mercurial Grabber.v1.03/Mercurial/FodyWeavers.xml

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

Mercurial Grabber.v1.03/Mercurial/Form1.Designer.cs

Resource

win7-20240903-en

discovery

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral8

Sample

Mercurial Grabber.v1.03/Mercurial/Form1.Designer.cs

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

Mercurial Grabber.v1.03/Mercurial/Form1.js

Resource

win7-20241010-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

Mercurial Grabber.v1.03/Mercurial/Form1.js

Resource

win10v2004-20241007-en

execution

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral11

Sample

Mercurial Grabber.v1.03/Mercurial/Form1.vbs

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

Mercurial Grabber.v1.03/Mercurial/Form1.vbs

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

Mercurial Grabber.v1.03/Mercurial/Mercurial.csproj

Resource

win7-20241010-en

discovery

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral14

Sample

Mercurial Grabber.v1.03/Mercurial/Mercurial.csproj

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

Mercurial Grabber.v1.03/Mercurial/Program.cs

Resource

win7-20240903-en

discovery

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral16

Sample

Mercurial Grabber.v1.03/Mercurial/Program.cs

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

Mercurial Grabber.v1.03/Mercurial/Properties/AssemblyInfo.cs

Resource

win7-20241023-en

discovery

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral18

Sample

Mercurial Grabber.v1.03/Mercurial/Properties/AssemblyInfo.cs

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral19

Sample

Mercurial Grabber.v1.03/Mercurial/Properties/Resources.Designer.vbs

Resource

win7-20241010-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

Mercurial Grabber.v1.03/Mercurial/Properties/Resources.Designer.vbs

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

Mercurial Grabber.v1.03/Mercurial/Properties/Resources.vbs

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

Mercurial Grabber.v1.03/Mercurial/Properties/Resources.vbs

Resource

win10v2004-20241007-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

Mercurial Grabber.v1.03/Mercurial/Properties/Settings.Designer.cs

Resource

win7-20240708-en

discovery

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral24

Sample

Mercurial Grabber.v1.03/Mercurial/Properties/Settings.Designer.cs

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral25

Sample

Mercurial Grabber.v1.03/Mercurial/Properties/Settings.settings

Resource

win7-20240903-en

discovery

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral26

Sample

Mercurial Grabber.v1.03/Mercurial/Properties/Settings.settings

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral27

Sample

Mercurial Grabber.v1.03/Mercurial/Properties/licenses.licx

Resource

win7-20240903-en

discovery

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral28

Sample

Mercurial Grabber.v1.03/Mercurial/Properties/licenses.licx

Resource

win10v2004-20241007-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral29

Sample

Mercurial Grabber.v1.03/Mercurial/Resources/AesGcm.js

Resource

win7-20241023-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

Mercurial Grabber.v1.03/Mercurial/Resources/AesGcm.js

Resource

win10v2004-20241007-en

execution

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

Mercurial Grabber.v1.03/Mercurial/Resources/Browser.js

Resource

win7-20240729-en

execution

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

Mercurial Grabber.v1.03/Mercurial/Resources/Browser.js

Resource

win10v2004-20241007-en

execution

windows10-2004-x64

1 signatures

150 seconds

Report Analysis Logs

General

Target

Mercurial Grabber.v1.03/Mercurial/FodyWeavers.xml
Size

139B
MD5

d43cae162166535ffb77fe23ba9939b3
SHA1

a90ee3518fcb92bc6fdf16a699b141f22b9b7946
SHA256

4448546786231d0d396a9987bc8776509a7a6f6fd755fc68ce63bed29ca8ee33
SHA512

30c836160cb51cb162391cc8172e620564d8529bbf618c930a0de4b037f977f03a9a3950cc3546194c5d452435aeb2fcbc416a8c5206b05710c1b11168d51e2a

Score

1^/10

Malware Config

Signatures

Processes

C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE
"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\Mercurial Grabber.v1.03\Mercurial\FodyWeavers.xml"
1⤵
PID:4840

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4840-0-0x00007FFD35050000-0x00007FFD35060000-memory.dmp

Filesize
64KB

Download
memory/4840-1-0x00007FFD7506D000-0x00007FFD7506E000-memory.dmp

Filesize
4KB

Download
memory/4840-2-0x00007FFD74FD0000-0x00007FFD751C5000-memory.dmp

Filesize
2.0MB

Download
memory/4840-3-0x00007FFD74FD0000-0x00007FFD751C5000-memory.dmp

Filesize
2.0MB

Download