Overview

overview

10

Static

static

10

Xenith external.exe

windows10-2004-x64

10

Xenith external.exe

windows10-ltsc 2021-x64

10

Xenith external.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Xenith external.exe

  • Size

    464KB

  • MD5

    e100e653c23372c11cb5f7d2e2aa19cd

  • SHA1

    3cde5da0c33f819bfdbe35217e0dc5b15f8de999

  • SHA256

    3dc8b2b1c3ced9219061ac2d7a000caa6b55d11b9b5588c4f08e3b9d2dbf63b5

  • SHA512

    53b96843996018800bbcfd2f36bc16df5329b6a6f225e5d24b9cc455ed158c352a671b37f0f9b5478ccc098f22ab7793d069a032a5b362eac720acdc594524d4

  • SSDEEP

    12288:s/UltPyOyoAWreyKs/+jJtgJzSOO8Z4zZY6dH:syPylrWrlGjJt8zLO8Z4zZY6dH

Score
10/10
mercurialgrabber

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/1311424192897618040/nvddKCHqpLtA7pd9-TyyrZ_3e9j8wMmjTjbfWvCd7RK9QAr7enGcgBkVxbBAlPgUCT7x

Signatures

  • Mercurialgrabber family
    mercurialgrabber
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Xenith external.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections