Extracted

• • Target

    GrimClient.exe

  • Size

    42KB

  • MD5

    741192c487a2285c838825a985c52891

  • SHA1

    4cb0d8720a185d8d3779f563a3f416257cf2cd09

  • SHA256

    22539771bc6ed75d61f5e470d84402ed2d6806eb471b802aa2c974908c901ae9

  • SHA512

    97151f1f713070a2a1d44b1b826517463166054679854925c7e5417fd9912f62292b6a637f7ef15c6150d6bbb245028ee1aaf25f910501ff10ca7f9fadb3893e

  • SSDEEP

    768:Tcn5EYH//4MxuZZLe0TjfKZKfgm3Eho/:qEaDMLe0TjF7EO/

  Score

  10^/10

  mercurialgrabberspywarestealer

  • Mercurial Grabber Stealer

    Mercurial Grabber is an open source stealer targeting Chrome, Discord and some game clients as well as generic system information.

    stealermercurialgrabber

  • Mercurialgrabber family

    mercurialgrabber

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Legitimate hosting services abused for malware hosting/C2

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1