Overview

overview

10

Static

static

7

Mercurial.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    Mercurial.exe
  • Size 3.2MB
  • Sample260824-pq548axfqa
  • SHA256 890fd59af3370e2ce12e0d11916d1ad4ee9b9c267c434347dbed11e9572e8645
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
mercurialgrabberagilenetcosturadiscoverypackerstealer

Malware Config

Targets

    • Target
      Mercurial.exe
    • Size 3.2MB
    • SHA256 890fd59af3370e2ce12e0d11916d1ad4ee9b9c267c434347dbed11e9572e8645
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    agilenetdiscoverymercurialgrabberstealer

    • Family: Mercurial Grabber Stealer

      Mercurial Grabber is an open source stealer targeting Chrome, Discord and some game clients as well as generic system information.

      stealermercurialgrabber

    • Obfuscated with Agile.Net obfuscator

      Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

      agilenet

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks