Overview

overview

10

Static

static

10

9ce1963269...58.exe

windows7-x64

10

9ce1963269...58.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    69e81464b8875c94b49f6766dd205897b8204de1238020a8acd3023176bf887f.zip

  • Size

    114KB

  • MD5

    a336c93e238cde1b1ec6222c6b2bf9d4

  • SHA1

    7d0aa60b238409b96e8efc3445f69ea92199c84e

  • SHA256

    69e81464b8875c94b49f6766dd205897b8204de1238020a8acd3023176bf887f

  • SHA512

    f3625d3bfa86649eb7b3a06d2153a05b2737e2f2ef7043cf2bc55491b98e4d6f48462886f35bdee8b81ea1905ab081b14b2a24390e8f60395b81b68e41b21150

  • SSDEEP

    3072:kRoWJmjixTDif4EZfHr+icf+VPOhmOifxjc+ZUEyJ:VIsixTD8V/r+icoy7iJjtQJ

Score
10/10
mercurialgrabber

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/877488114191466546/FUrNh0PeCyjW3Yr_BJdodg7lzmuSvDjTsy_PMxpPmuinCJuw1BpCnGLb-rAPNYxQ9EIb

Signatures

  • Mercurialgrabber family
    mercurialgrabber
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 69e81464b8875c94b49f6766dd205897b8204de1238020a8acd3023176bf887f.zip
    .zip

    Password: infected

  • 9ce1963269efaa3e64273e20c04c215dfe781044813336fa1bdd5fe126345458.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections