Overview

overview

10

Static

static

10

JaffaCakes...a7.exe

windows7-x64

10

JaffaCakes...a7.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_df01a8c7077dbe40e68979f486ad29a7

  • Size

    57KB

  • MD5

    df01a8c7077dbe40e68979f486ad29a7

  • SHA1

    0f335a9a6ead9b8961a57bc724c93fb672ec14cb

  • SHA256

    d361b54090cffa37e08b270d91a6fa1aec4f78347f38ba930328c84733a233cb

  • SHA512

    ddca81cffd4abb81b405490f94e61a2c8a5f332796ad66e2f3b1add9d53138a55dc65a3c346e9eafa35fdd49f8035a75019988c6594f3d837cd6c006455d3601

  • SSDEEP

    768:yrLfRHhf9uZ+LMmTjWKZKfgm3EhI99clYC3VVyAfe42TevR7u:yBhfJLMmTaF7Ei99cLVVx0T8B

Score
10/10
mercurialgrabber

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/898889485121646654/Xxon9mS9UonT3xyMDqO6eCIMgJjH0-mL9tBhX80ege_hMkOEMEtFNtSz1AyiX_Adui_Y

Signatures

  • Mercurialgrabber family
    mercurialgrabber
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_df01a8c7077dbe40e68979f486ad29a7
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections