General
-
Target
2024-06-11_ddf0d69aa0434390b182b8f9087ac1f1_ngrbot_snatch
-
Size
14.2MB
-
MD5
ddf0d69aa0434390b182b8f9087ac1f1
-
SHA1
3faa53f7982e3b0c4345c4b8c3622f8e1c68d4e4
-
SHA256
882d7d99926d584d956a9181f046fa7318a801f45dd2478071e0401f63a26d43
-
SHA512
2f7759faf021bfa1fabb9858581308d5541c1f2d8462d35cc95569ce952625a9a3566e6db59e4ace164f445db412da76bbb3726b3e61709ab1032f44d3988e55
-
SSDEEP
196608:lfdE9tDy+kk+4sUKcc3Az3dmbsdp+6pVvfSw895ptvwz:lVEXkUKOGsdPR2Xv
Score
10/10
Malware Config
Signatures
-
Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs. 1 IoCs
-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers. 1 IoCs
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers 1 IoCs
-
Detects executables containing URLs to raw contents of a Github gist 1 IoCs
-
Detects executables containing possible sandbox system UUIDs 1 IoCs
-
Detects executables referencing virtualization MAC addresses 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2024-06-11_ddf0d69aa0434390b182b8f9087ac1f1_ngrbot_snatch
c2d457ad8ac36fc9f18d45bffcd450c2
Headers
Imports
Sections