Analysis
-
max time kernel
133s -
max time network
124s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
23-05-2024 00:42
General
-
Target
2024-05-23_898d502ac5fc9d0e48e47aadbbd3cb73_ngrbot_snatch.exe
-
Size
9.5MB
-
MD5
898d502ac5fc9d0e48e47aadbbd3cb73
-
SHA1
ecbb4683dcff42c17a3bc7c48df85ce39c5938de
-
SHA256
d3cb3823d0d06f044dd92340d6c4b96fb7cf399fbd2933ce4d912f5f17e07e06
-
SHA512
c1f18859c97452aea92c018bca6d953742594e132e49587f436364c438594180c9a0aa767e809edf3930d7346cf7153f766be0fd27db231338e2d2cbf95522b0
-
SSDEEP
98304:tTpJGtW3dCYeTSalXtazFwFEKsFSFUE4vuT:TctW3AlXtapw2Ks84vuT
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-23_898d502ac5fc9d0e48e47aadbbd3cb73_ngrbot_snatch.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-23_898d502ac5fc9d0e48e47aadbbd3cb73_ngrbot_snatch.exe"1⤵
- Suspicious use of AdjustPrivilegeToken