General
-
Target
2024-06-04_34747004c1d2293219c6b1411fa4c6ce_ngrbot_snatch
-
Size
20.9MB
-
MD5
34747004c1d2293219c6b1411fa4c6ce
-
SHA1
36e540e1a444eec9476c27f1e67e2f15089c18fc
-
SHA256
d23cf4d4808011dc44773ff4032c1d59ad53b2d748e69f284b7372cbbbcb69e8
-
SHA512
3fc61e046bdcf8730f4ebfc04448570b7acb2ec42149fb004a623db39a65708b36b740fe39c0fd17adc7c12bb01d6087f6fcf85f090a441d7f27d464cb62f222
-
SSDEEP
196608:vbW8g5umJ5BtHo8C+r9WgvV44esp7JfuzVLt3:jVg5ueCCcZ
Score
10/10
Malware Config
Signatures
-
Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs. 1 IoCs
-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers. 1 IoCs
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers 1 IoCs
-
Detects executables containing URLs to raw contents of a Github gist 1 IoCs
-
Detects executables containing possible sandbox system UUIDs 1 IoCs
-
Detects executables referencing virtualization MAC addresses 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2024-06-04_34747004c1d2293219c6b1411fa4c6ce_ngrbot_snatch
c2d457ad8ac36fc9f18d45bffcd450c2
Headers
Imports
Sections