Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    idtoip.exe

  • Size

    42KB

  • MD5

    6c9e0a5d15c0241a6c251c1c0551dc2b

  • SHA1

    6266f959050757346485a255a1a519b62909a06e

  • SHA256

    60445c9764e847e363510f3e712ba3dec585cc1c3aaae2e768ea91f90f1167e5

  • SHA512

    b148b42131df21274afed1f94e7b52ce598d20043764fcf30efa8bc263a6fa35fb9bb4eee3aac72466014ab695dfd2098d11df137314ede2fafae0b099daac65

  • SSDEEP

    768:RrK3XLHuke/uZX/LUoTjlKZKfgm3Eh2E:RrAHreC/LUoTBF7E8E

Score
10/10

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/1023649160781627452/Z2J5_lSXTf8Ru8b1Ruf_8FzpV15ibh2daVt0tAyXiTMx-xnYA0jbtrN5LtVuXM5wg15x

Signatures

  • Mercurialgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • idtoip.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections