Overview

overview

10

Static

static

10

MexoTempSpoofer.exe

windows7-x64

10

MexoTempSpoofer.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    MexoTempSpoofer.exe

  • Size

    42KB

  • MD5

    d7ccf6dae6f63e6828e2dfa59bc0a627

  • SHA1

    6b89b78f2ad0610e06895660d885f7f5f3420016

  • SHA256

    37e185d5dcb85f7ef75bd6a8549b7f937a51390dee15595b3dbffaa99c7c61da

  • SHA512

    13114ae6ed650532450c1b8e1533ee4f1273af51260f8b78432bc391b8358467887306bb5ba008c447cc19fef0e47aa9c3775a8f32670c8c2ea6693eb7849db6

  • SSDEEP

    768:jmtNY8Y1XPPomMpuZoLuiTjlKZKfgm3EhjJ:mLYlOLuiThF7EVJ

Score
10/10
mercurialgrabber

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/1312449321681158316/eG-YAKPZOIPE_-PjejXuWNMq9hRvfRc8hD5UqxKwrNZoOC1ykn4WzXso8qwWLgifPt-w

Signatures

  • Mercurialgrabber family
    mercurialgrabber
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • MexoTempSpoofer.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections