Extracted

• • Target

    Sigma.exe

  • Size

    41KB

  • MD5

    9aff73f27f7afc4251dfe1ac8fe52d7d

  • SHA1

    deef8ffa68978c9c8b398e5f7c4c026faf63fa5d

  • SHA256

    546b7e985765d0a21e915869dad863133255bb081e8de5407f7104cd5bdcb77b

  • SHA512

    ee2f3c18744b749dc68003f7e81c800c288060c9e56f74e61c706b3c61c17198b42401da49e524e4e77ae8a5f5847adf387034f12898a9fdeabddfc465b7a3a9

  • SSDEEP

    768:yscaIiIEI/gB1wtduZ0e6WTj8KZKfgm3Eh3/:hc1yYgBEe6WToF7EJ/

  Score

  10^/10

  mercurialgrabberspywarestealer

  • Mercurial Grabber Stealer

    Mercurial Grabber is an open source stealer targeting Chrome, Discord and some game clients as well as generic system information.

    stealermercurialgrabber

  • Mercurialgrabber family

    mercurialgrabber

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Legitimate hosting services abused for malware hosting/C2

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1