Mercurial[.]Grabber[.]v1[.]03[.]rar

Target
Mercurial.Grabber.v1.03.rar
Size 2.9MB
Sample260306-ymst6adv2m
SHA256 3759744039346620e9613f40f90e8f318e5f54ad49c070e2bd23b667f7e65bf6
MD5 635903bad1ada856d701f34d3070ccd9
SHA1 3ff98d91b9a3a47bf9f64bdf161efb9c5ac99fb0
SHA512 fee2c64124c47bcb1251b7b87969a1ff493e24bc196633e3a301565b126f5ed2e2967d4d1426ff5d9be9466c852bacf405229308acf946368e00ca887a4ef015
SSDEEP 49152:lYtbFd+FwSjhWaqv7yBSw9i4b1g8lDZxu0TR9TlqdqjxaNOH:qkwSVef4NDW8qEfH
TLSH
T1CFD533876D8B3139F7E239B9149D0A43166AB1FD2CBD7908C6BDD27012C2D2681D7F29
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Mercurial.exe

File Explorer

Mercurial.Grabber.v1.03.rar

.rar 2.9MB
Mercurial.exe

.exe 3.2MB
readme.txt

64B

Mercurial.Grabber.v1.03.rar

SHA256 3759744039346620e9613f40f90e8f318e5f54ad49c070e2bd23b667f7e65bf6
MD5 635903bad1ada856d701f34d3070ccd9
SHA1 3ff98d91b9a3a47bf9f64bdf161efb9c5ac99fb0
SHA512 fee2c64124c47bcb1251b7b87969a1ff493e24bc196633e3a301565b126f5ed2e2967d4d1426ff5d9be9466c852bacf405229308acf946368e00ca887a4ef015
SSDEEP 49152:lYtbFd+FwSjhWaqv7yBSw9i4b1g8lDZxu0TR9TlqdqjxaNOH:qkwSVef4NDW8qEfH
TLSH
T1CFD533876D8B3139F7E239B9149D0A43166AB1FD2CBD7908C6BDD27012C2D2681D7F29
MD5 SHA1 SHA512 SSDEEP TLSH

Mercurial.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 890fd59af3370e2ce12e0d11916d1ad4ee9b9c267c434347dbed11e9572e8645
MD5 a9477b3e21018b96fc5d2264d4016e65
SHA1 493fa8da8bf89ea773aeb282215f78219a5401b7
SHA512 66529a656865400fe37d40ae125a1d057f8be5aa17da80d367ebbe1a9dcea38f5174870d0dc5b56771f6ca5a13e2fad22d803f5357f3ef59a46e3bdf0cc5ee9c
SSDEEP 98304:5kjozJ9/im8XVBKl6t1buVfRhq+5tXzgCa/T:lzJpjS346t1bIfuq07
TLSH
T107F512103625490EEE7641B42966858CC7722F271790D6AC3F8D3D8B7FF27F44621AAB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

3259134

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\css\source\Mercurial Free\Mercurial\obj\Release\Mercurial.pdb

Mercurial.Grabber.v1.03.rar

Mercurial.exe

mscoree

dotnet

readme.txt