General
-
Target
2024-06-13_b8c70bbe49951cb98becf2fc0bce3b7b_ngrbot_snatch
-
Size
9.5MB
-
MD5
b8c70bbe49951cb98becf2fc0bce3b7b
-
SHA1
9c22bea97baabb2b9a216a9cd2fce6b090338b06
-
SHA256
2835b997c97408baa0da7326c63278207bcb5637f6ecb2ba70b3036092e96bc6
-
SHA512
6b305a8a12f2ddc43af26869c9660007a190bae263f52efc7c7c398aa0756bb49087ab308270634171cc85d12506b310c28b1b63bcd7bc7f6477931f9a6edfb4
-
SSDEEP
98304:LSmOlLSf32qnCdTvvWyh9b5KEgjoVF8XOR4hj:4hSf36vWyhl5XIzw4hj
Score
10/10
Malware Config
Signatures
-
Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs. 1 IoCs
-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers. 1 IoCs
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers 1 IoCs
-
Detects executables containing URLs to raw contents of a Github gist 1 IoCs
-
Detects executables containing possible sandbox system UUIDs 1 IoCs
-
Detects executables referencing virtualization MAC addresses 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2024-06-13_b8c70bbe49951cb98becf2fc0bce3b7b_ngrbot_snatch
c2d457ad8ac36fc9f18d45bffcd450c2
Headers
Imports
Sections