General
-
Target
2024-05-13_44deb2095bdc44f32407f34730f9550d_ngrbot_snatch
-
Size
9.5MB
-
MD5
44deb2095bdc44f32407f34730f9550d
-
SHA1
eafa9fcd92f3ac624507913f653783756f07572a
-
SHA256
9c7a45552b1afc87c98eb34c63e3310b6046007b5d6a1ef45b2d09e1ae137367
-
SHA512
24f15235a3ce75b7a01f43e28a45563d9df0c7ece94b6871db04cdc1f0bc25576162b719458f9a62b86e9e92dcd08e20726caf084a4534f40218063f637115bc
-
SSDEEP
98304:ZztYz3Rvcc6RvcRlcR0IS1gn25CEJ8+SF8IO3X:MzRvcT0UR0IS2ngJ8zO3X
Score
10/10
Malware Config
Signatures
-
Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs. 1 IoCs
-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers. 1 IoCs
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers 1 IoCs
-
Detects executables containing URLs to raw contents of a Github gist 1 IoCs
-
Detects executables containing possible sandbox system UUIDs 1 IoCs
-
Detects executables referencing virtualization MAC addresses 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2024-05-13_44deb2095bdc44f32407f34730f9550d_ngrbot_snatch
c2d457ad8ac36fc9f18d45bffcd450c2
Headers
Imports
Sections