General
-
Target
2024-05-22_c31584d1c284196fff1741587430387c_ngrbot_snatch
-
Size
9.5MB
-
MD5
c31584d1c284196fff1741587430387c
-
SHA1
103f536ec560175b1e761e3ea8e381c244c97044
-
SHA256
8abe85908773ed1f85f096294f02cc31726a80d779d8faa269804cb601d25fb4
-
SHA512
779d9108a66bff93e1e628b1e7592ca2cccc44839a513cc2edb1c857956a5ea4bf126a6e4d127dcc415a071038eb944b251fefc9807b742a50ea6c032c041e91
-
SSDEEP
98304:LRAh3hZVrncX71OTa2ysEVVW0qEGhiWvjqH53r:ahRZVrng2ysEnW03G/qZ3
Score
10/10
Malware Config
Signatures
-
Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs. 1 IoCs
-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers. 1 IoCs
-
Detects executables Discord URL observed in first stage droppers 1 IoCs
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers 1 IoCs
-
Detects executables containing URLs to raw contents of a Github gist 1 IoCs
-
Detects executables containing possible sandbox system UUIDs 1 IoCs
-
Detects executables referencing virtualization MAC addresses 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2024-05-22_c31584d1c284196fff1741587430387c_ngrbot_snatch
c2d457ad8ac36fc9f18d45bffcd450c2
Headers
Imports
Sections