86222b0b751b8ba43a03a9fd85b28344fa55b5b60847f96d9614f1a5d977ab1c

Analysis

user interaction
yes
max time kernel
16s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
10/09/2026, 15:07

Target
Mercury.exe
Size 5.2MB
Sample260910-shaj5adk7s
SHA256 86222b0b751b8ba43a03a9fd85b28344fa55b5b60847f96d9614f1a5d977ab1c
MD5 7bfc1b0ddbf982685f733c16a1ff54c9
SHA1 5d49f4514bbb995ce0f9b1f824d1d0f402a24b77
SHA512 4e61d4246ff9a27c7ff0794bb438aead26ec832317de78f617254553b563f552318e342073ff646b21359fa5bd5a8f8f175c3a583d2db0fa860b53b0a30c2d99
SSDEEP 49152:oisiuqfC5YAHeF/JB4oeIRZhIBDKhvV96a7hYcIv9iYJ/jxD4ivif3opnzN9HsKn:nJAHUMRdzrviQdsKKHeVXG
TLSH
T1BA46AE91B6B504F9D076D139D6424213EB72381903318AFB37EC8A5A1F5BBE05F7BA12
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2876	Mercury.exe

C:\Users\Admin\AppData\Local\Temp\Mercury.exe
"C:\Users\Admin\AppData\Local\Temp\Mercury.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2876