General
-
Target
2024-05-10_7acd50f3265f5e804194742ec53f43a3_ngrbot_snatch
-
Size
9.5MB
-
MD5
7acd50f3265f5e804194742ec53f43a3
-
SHA1
8df4ab2c06befd6f16ab9a6321d8fed97cfd03f1
-
SHA256
6b9be6368006b4b7e35f5a56ad2d54fe4bdf5b20a1376bef3180a87783093a57
-
SHA512
62bc0f8641a1279aa052bec8c0722ebcdb239c91d601515a09452c3c5f932f49fb52dfb564460bba347a1b227e97e3d6a14637e5d4fec58e78b734d403e09f17
-
SSDEEP
98304:bgRlhZ3CQw70dg9w8JwpDFCxLhJl/ETezKpAYEt8:sdZ3CQwEwrblcTez6c8
Score
10/10
Malware Config
Signatures
-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers. 1 IoCs
-
Detects executables Discord URL observed in first stage droppers 1 IoCs
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers 1 IoCs
-
Detects executables containing possible sandbox system UUIDs 1 IoCs
-
Detects executables referencing virtualization MAC addresses 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2024-05-10_7acd50f3265f5e804194742ec53f43a3_ngrbot_snatch
c2d457ad8ac36fc9f18d45bffcd450c2
Headers
Imports
Sections