Extracted

• • Target

    MexoTempSpoofer.exe

  • Size

    42KB

  • MD5

    d7ccf6dae6f63e6828e2dfa59bc0a627

  • SHA1

    6b89b78f2ad0610e06895660d885f7f5f3420016

  • SHA256

    37e185d5dcb85f7ef75bd6a8549b7f937a51390dee15595b3dbffaa99c7c61da

  • SHA512

    13114ae6ed650532450c1b8e1533ee4f1273af51260f8b78432bc391b8358467887306bb5ba008c447cc19fef0e47aa9c3775a8f32670c8c2ea6693eb7849db6

  • SSDEEP

    768:jmtNY8Y1XPPomMpuZoLuiTjlKZKfgm3EhjJ:mLYlOLuiThF7EVJ

  Score

  10^/10

  mercurialgrabberspywarestealer

  • Mercurial Grabber Stealer

    Mercurial Grabber is an open source stealer targeting Chrome, Discord and some game clients as well as generic system information.

    stealermercurialgrabber

  • Mercurialgrabber family

    mercurialgrabber

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Legitimate hosting services abused for malware hosting/C2

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2