General

  • Target

    Vortex Nuker 1.42.exe

  • Size

    279KB

  • MD5

    207f8d8cc0950ff123508360f40d187d

  • SHA1

    be3e5514551c68ad5b45b641621fcfd71797da5c

  • SHA256

    2876fe40976ecb099dfa01f066afc303bf2031a812d3b150896523ded9a865a8

  • SHA512

    d807019a0f164c44c4bffbb72a84255412c7e588b161cc1acbb170d541ac3a6ca8243b29cf8aaded537d90de03e7b283070c242bdb6a59ee1126a29d3c3efc61

  • SSDEEP

    3072:PmWL9TbF7EdANMe6rtVn+V6WBvAYioEefM9HZ5n3jTZakMhg+M4aluJrp/6fHC:PmWUjDqzBvA9ve4bn3jNa0+MEJt/D

Score
10/10

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/1352056092800061442/3CzW1cCaNZTbI4VuvNwVmMh68Q--8Gdw0gWMKHle7Np63DV39kvHq5YBo3g8N66-juC8

Signatures

  • Mercurialgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Vortex Nuker 1.42.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections