General
-
Target
2024-06-04_15926a00e3f09c3abfa6f72376054af1_ngrbot_snatch
-
Size
17.2MB
-
MD5
15926a00e3f09c3abfa6f72376054af1
-
SHA1
091eabc6fb7c5c62d8e1bfb53134b81444ba6b21
-
SHA256
12415b4840890113493fdb2bd281e3ea25f92e4e78d5910f292fcd7d331ae680
-
SHA512
af311fa9b75bcbb14ea6a3e0bbcfe3432c34f7041cd1e078e8b411263c77736944a67a36fff50e3514edf405bf4f6d20233132868e7fab8d3fac17883db64c8a
-
SSDEEP
196608:NEZD0L0Qqc/hwJ4/zLJf3iAiEHKqflPiq/:it0eJMHL
Score
10/10
Malware Config
Signatures
-
Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs. 1 IoCs
-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers. 1 IoCs
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers 1 IoCs
-
Detects executables containing possible sandbox system UUIDs 1 IoCs
-
Detects executables referencing virtualization MAC addresses 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2024-06-04_15926a00e3f09c3abfa6f72376054af1_ngrbot_snatch
c2d457ad8ac36fc9f18d45bffcd450c2
Headers
Imports
Sections