General
-
Target
Nexus.zip
-
Size
18KB
-
MD5
bc9457efb3fd35f6272b812079671373
-
SHA1
083b4d99f8dd897ad939027f092a4725c1070794
-
SHA256
59c3b3b8a5be518fa876c8236c97fb5f267ca71f4ed8f68399dc6e58621741aa
-
SHA512
deb8070618eb49c7b0e72a712d07901268f785d8b182ace85694137846a1d2be6e25b6d98d97a326f242e6e104be2cc4645af3b9e287fd106e4973a70eca7871
-
SSDEEP
384:hxwixM+nFtfJl8L5f1Gvp+ESd3XJL9BvR0LodB2IP4QmN+tA1:hKi7Q/+Yh3ZRBvR0Cf1a+e1
Score
10/10
Malware Config
Extracted
Family
mercurialgrabber
C2
https://discord.com/api/webhooks/1318490592392515594/CaM0cAa4-Oi_iXHBiVS9ZB_zIfBiNf-F8okhA3-1UsMnWScS22GWWOOUK0emIKf2VNCQ
Signatures
-
Mercurialgrabber family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
Nexus.zip
-
Nexus/Nexus Executor.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections