General

  • Target

    test.exe

  • Size

    41KB

  • MD5

    1cdef1bb03b387ab03056679a76fbb9a

  • SHA1

    fcad7bf599054bfc1d5308575edf1b3f059b5740

  • SHA256

    62a2a9c372635344dee03d3e875ca555910cc8f95e139cf44e653f5c267a4350

  • SHA512

    c9d423cfe2d0ac05ec4f7163c1a1fcfa9776a100ac885bf6dff36542d4b37cf62511eeeb8c594fbf241a2212dd8336b366d3734af7d2fdf5ab65e4994c60d11b

  • SSDEEP

    768:gscaIyIde8bH5M/BgwJuZPeE7WTj5KZKfgm3EhWS:Xc1He86IeE7WT9F7EAS

Score
10/10

Malware Config

Extracted

Family

mercurialgrabber

C2

https://discord.com/api/webhooks/1356363803427737691/n_sUq8ti_BHeJHX3D-pQNlVax1pVJnbauSB8J9QNwlkD0hjVHeCGOM0i82aGyucFU3mG

Signatures

  • Mercurialgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • test.exe
    .exe windows:4 windows x86 arch:x86

    Password: 131

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections