General
-
Target
2024-05-15_5b9731dc85c4c73f4fcc491a17d57fcd_ngrbot_snatch
-
Size
5.4MB
-
MD5
5b9731dc85c4c73f4fcc491a17d57fcd
-
SHA1
24699fcc2df32502e959a6f918190eb1b9241319
-
SHA256
a704f907107e0208de4b35e93e6d435dc54fd8f28c87c84250502a2dfa5b5738
-
SHA512
1d0261bc229c2e8ebe3372ef6abcaf9fbe96162d8853c0b9f3c36ab77ebf3d844924d1c5571bd5b4017e227f01ca05985d6b48c4e23d41d59903d0e5ed0502b8
-
SSDEEP
49152:xcIa7C33IJszhP0o/eiY9iCl3miEcUD9HTxTju5EFhoRvE9Zz:qa33IGNPaiCUu0duEFSR
Score
10/10
Malware Config
Signatures
-
Detects executables containing possible sandbox system UUIDs 1 IoCs
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defender features 1 IoCs
-
Detects executables referencing virtualization MAC addresses 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2024-05-15_5b9731dc85c4c73f4fcc491a17d57fcd_ngrbot_snatch
c2d457ad8ac36fc9f18d45bffcd450c2
Headers
Imports
Sections