General
-
Target
2024-06-07_87685574a97c2b7355cf75df3c6a7d6d_ngrbot_snatch
-
Size
9.3MB
-
MD5
87685574a97c2b7355cf75df3c6a7d6d
-
SHA1
c0966e0ad6578b59a6f95073d21618bd797dc548
-
SHA256
8eb5c3bb4a926fd2ee2b4830a1248c114ead7d7782c086afcc5b82e5c1f75eb5
-
SHA512
0ba5f717241a3882d8d49e24942c121f460e08039f6fa304700fd9a4659e0a30012633f6467daf57b84151a291dbe4c48178f263a072995a3eced88c82073670
-
SSDEEP
98304:Q2WFke58etbgH67479hFti3Xo3sEdfkF4Chy8bXgnAfz:Mke58etbEZfti3XWdfkF4ChSWz
Score
10/10
Malware Config
Signatures
-
Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs. 1 IoCs
-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers. 1 IoCs
-
Detects executables Discord URL observed in first stage droppers 1 IoCs
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers 1 IoCs
-
Detects executables containing URLs to raw contents of a Github gist 1 IoCs
-
Detects executables containing possible sandbox system UUIDs 1 IoCs
-
Detects executables referencing virtualization MAC addresses 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2024-06-07_87685574a97c2b7355cf75df3c6a7d6d_ngrbot_snatch
4f2f006e2ecf7172ad368f8289dc96c1
Headers
Imports
Sections