Overview

overview

10

Static

static

10

JaffaCakes...a8.exe

windows7-x64

10

JaffaCakes...a8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_f82abf40d8dba7e95b599d6da4fe1ca8

  • Size

    42KB

  • MD5

    f82abf40d8dba7e95b599d6da4fe1ca8

  • SHA1

    12c8c45fc41aca8835a4322a51d7e16397d18aa7

  • SHA256

    4f6f9f506a46bdebbd49810697a5ac18594519b2f967dd3efe8f5cc1338f5ee1

  • SHA512

    d6bb7b225cb8a4bf163dd44d7dbfc031096229ea981fc73394ed45a3d219f22df2de8795067ee7d00841ab4aa9fb3fe606b075e4c02209d4cef37e806bc06fe0

  • SSDEEP

    768:sPwQ5Ehi4//4MzuZnL2lTjVK6Kfgm3Ehg9:uE0aDwL2lTZ+7Eu9

Score
10/10
mercurialgrabber

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/926188366184189993/zwM_TLbliOIXmneGu2eem2xQ85ZWaWcQhFrI9L0O1E2WYXCxztiGwbrVLc42r8PHJQ2K

Signatures

  • Mercurialgrabber family
    mercurialgrabber
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_f82abf40d8dba7e95b599d6da4fe1ca8
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections