General
-
Target
2024-04-25_4c1ef2e88cedcee20b5c55011f602df4_ngrbot_snatch
-
Size
9.5MB
-
MD5
4c1ef2e88cedcee20b5c55011f602df4
-
SHA1
2e5530448ce5268fd2a30ec56e536ed531f06d80
-
SHA256
eebc8678b11756d12c6caf50889ddb6b423d54b2873606cead7bf832c8ec00c3
-
SHA512
4c5a827a9e6abafd9080b402264645c50ad505d3f2ef12aade3f15c560d81235a9d25421dfa5b7115d275077994e97f50d181324945d7e35bda7d0a8ba33cfec
-
SSDEEP
98304:yt974A+/ZDt+lL7aDP0glwwm9Be7EVPh0cVQHvP:/bDt+lABlwwmzeoVPhWvP
Score
10/10
Malware Config
Signatures
-
Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs. 1 IoCs
-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers. 1 IoCs
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers 1 IoCs
-
Detects executables containing URLs to raw contents of a Github gist 1 IoCs
-
Detects executables containing possible sandbox system UUIDs 1 IoCs
-
Detects executables referencing virtualization MAC addresses 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2024-04-25_4c1ef2e88cedcee20b5c55011f602df4_ngrbot_snatch
c2d457ad8ac36fc9f18d45bffcd450c2
Headers
Imports
Sections