General

  • Target

    b47660d667192eb8ff7bd90f82b96be3_JaffaCakes118

  • Size

    42KB

  • MD5

    b47660d667192eb8ff7bd90f82b96be3

  • SHA1

    99b79b8354ce8daa2aebc344075922764f237291

  • SHA256

    99222d220790ce759074bf80fa779bb900e13cb799c5062d6c99f434a7de7f85

  • SHA512

    80dce47853a76bda22dc6f14563ae8ae3d687fd611928b493cea7ebef45a96e47f9519846c22bdb97608e6c616c644d6b2ce3787836b38df2396fe57d7158bd1

  • SSDEEP

    768:TuLYNqV41M76auZZLruTjgKZKfgm3Eh6X:yeqWA6FLruTEF7EAX

Score
10/10

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/873691851314561054/UYwGmk3xyBqSE9zsMIgFURABFSgGeD6cMRnK-oGpYaJjMfyNA9rtXKWKpHvsvahhEL_D

Signatures

  • Mercurialgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b47660d667192eb8ff7bd90f82b96be3_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections