General

  • Target

    Nexus.zip

  • Size

    18KB

  • MD5

    bc9457efb3fd35f6272b812079671373

  • SHA1

    083b4d99f8dd897ad939027f092a4725c1070794

  • SHA256

    59c3b3b8a5be518fa876c8236c97fb5f267ca71f4ed8f68399dc6e58621741aa

  • SHA512

    deb8070618eb49c7b0e72a712d07901268f785d8b182ace85694137846a1d2be6e25b6d98d97a326f242e6e104be2cc4645af3b9e287fd106e4973a70eca7871

  • SSDEEP

    384:hxwixM+nFtfJl8L5f1Gvp+ESd3XJL9BvR0LodB2IP4QmN+tA1:hKi7Q/+Yh3ZRBvR0Cf1a+e1

Score
10/10

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/1318490592392515594/CaM0cAa4-Oi_iXHBiVS9ZB_zIfBiNf-F8okhA3-1UsMnWScS22GWWOOUK0emIKf2VNCQ

Signatures

  • Mercurialgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Nexus.zip
    .zip
  • Nexus/Nexus Executor.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections