Overview

overview

10

Static

static

10

GrimClient3.5.exe

windows11-21h2-x64

10

Resubmissions

17/03/2025, 16:00

250317-tf3cssxms8 10

17/03/2025, 15:57

250317-td9dbstwgs 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    GrimClient3.5.exe

  • Size

    42KB

  • MD5

    f8aad0ba44c22a03a92c8a992de6f188

  • SHA1

    a8f8ac95ee5a49a473104581ba073118c0f545f7

  • SHA256

    ccf8f646ddf20ba1e354c3ad35880e441d78ab292a2fd8b2edd49f3abfbe0422

  • SHA512

    7fa3cb08ee2b176ddaeb3bf20bed0a46a583c87a01922851975e1d191999f47a9dfe4421c8eb50c15c5c8b97d80c99d3da59fc97eb7756b84a216d5b61f51820

  • SSDEEP

    384:7AfIRHS2LtjR39hxiTRWgxfYTx2s/XZxIh/9oJEFq5nm0GTAsQ4KQsLd/SfgUfAQ:Z7DxURWf4uZvLlGTjQ4KZKfgm3Eht+

Score
10/10
mercurialgrabber

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/1351222685405024296/pvzGqfhW1MeB2uoiUPX5kRWkfddZIOBcx4zo8SpxDvoTeVdF_InCZ3P760g3QMnaEEnA

Signatures

  • Mercurialgrabber family
    mercurialgrabber
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • GrimClient3.5.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections