General
-
Target
2024-05-12_bef4da375c08db3e12dc124a9dbb638a_ngrbot_snatch
-
Size
14.2MB
-
MD5
bef4da375c08db3e12dc124a9dbb638a
-
SHA1
6599da66262a3d698aee5334715a8bbdfd549032
-
SHA256
849dfe3372a44666c2b2cd1e863b868d4d50f48862e63f4a6702c82f37edd631
-
SHA512
76523c1ea5907c1a5238a177ce2f3b9af0a708bf3d7b62945a5c8ca2a9898604f13d82d19b829ee48301018ca20a79d3787b102e8e290d08a4daf29ea706b2d1
-
SSDEEP
196608:QmJPmLS0LSbTtsnpVDpSWRn82WlWKiw87PNWB2Nv1RMPvNa3Tb3:QoPUwsnpJRZWlWhida3
Score
10/10
Malware Config
Signatures
-
Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs. 1 IoCs
-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers. 1 IoCs
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers 1 IoCs
-
Detects executables containing URLs to raw contents of a Github gist 1 IoCs
-
Detects executables containing possible sandbox system UUIDs 1 IoCs
-
Detects executables referencing virtualization MAC addresses 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2024-05-12_bef4da375c08db3e12dc124a9dbb638a_ngrbot_snatch
c2d457ad8ac36fc9f18d45bffcd450c2
Headers
Imports
Sections