General
-
Target
2024-04-27_8c664d63306237ac0cb2c9e44e94496a_ngrbot_snatch
-
Size
9.1MB
-
MD5
8c664d63306237ac0cb2c9e44e94496a
-
SHA1
d3db8e0e2483795fac06ff31ac285d645a8f7bbe
-
SHA256
d9378691147369a0c0451052d5cf86dd385116f48df3035ce8a1c35cb5bb1e72
-
SHA512
6699292c7ced17b6f5b1583b8e77d6d9daa6be0ac4364fd8747be73ab06fd7a11112f1bac79619c9ba23872d9419bd9b1e11ae76c3223e697aa96163789b8d47
-
SSDEEP
98304:0PAcyoPHV7PM1fRR416oYRdtOP9MEaWeWZwSr:0PVP17PM1gRYRullRnw
Score
10/10
Malware Config
Signatures
-
Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs. 1 IoCs
-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers. 1 IoCs
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers 1 IoCs
-
Detects executables containing URLs to raw contents of a Github gist 1 IoCs
-
Detects executables containing possible sandbox system UUIDs 1 IoCs
-
Detects executables referencing virtualization MAC addresses 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2024-04-27_8c664d63306237ac0cb2c9e44e94496a_ngrbot_snatch
c2d457ad8ac36fc9f18d45bffcd450c2
Headers
Imports
Sections