General

  • Target

    eb60cc7c8df99ffa730d19c1fd8a16d1_JaffaCakes118

  • Size

    42KB

  • MD5

    eb60cc7c8df99ffa730d19c1fd8a16d1

  • SHA1

    9e936930cad361a08bf4634dae2894389b34fbe6

  • SHA256

    da589f1ca86105eaff9178f50fc6de6a4ea5381e01de84e4ce09ecf06a460d11

  • SHA512

    6ad60fdafc381c37c532cc349fbb4a975757aaae550d6c5919baa8d44b930a063eed0a174dc3031c24694dc64556e410bc1c32c071308baaa10a7982acc98e83

  • SSDEEP

    768:wJoR/gOE1Z+ZW4uZWLDrTjwKZKfgm3EhOl:yiE1MZhLDrTcF7E8l

Score
10/10

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/893172291414937600/OHG51KFhZxtIdDyHNOAGDQeKXCSotyo5wauoSbTY2hELfJ51jYHIw_egTH1o6NV5R3YO

Signatures

  • Mercurialgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • eb60cc7c8df99ffa730d19c1fd8a16d1_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections