General

  • Target

    GrimLoader.exe

  • Size

    42KB

  • MD5

    735eb25f877a4980b0b76c2f065d4a70

  • SHA1

    4a8b6aed9b6a1f849d5ad34a2c362afbfbc74005

  • SHA256

    135fdc6be56667ccda9e1171eaee2adb19d13e2ec18768b9ecc029c29ed17ad9

  • SHA512

    0c50c594be3552ab274d1750a097f0439678190d4cb5eb890e86bde1a8c018a71ff13ea86daaf9aa84dff600b552ce015040e4aa6b9543b0fbc213b6c8c04c90

  • SSDEEP

    768:MmtZ5E9E//4MluZNLL9Tj+EKZKfgm3Ehkz:ZEIDkLL9TKEF7E2z

Score
10/10

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/1351217330234851339/6y7ZFPB3atPFLb0xPM7cN5NPowrs6q29FzdK-4qDAFOjpV_eXwVJoAJmvEsfgiZwHomE

Signatures

  • Mercurialgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • GrimLoader.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections