General
-
Target
2024-06-15_9ed3af21985edc2b5563b506369a5e44_ngrbot_snatch
-
Size
9.5MB
-
MD5
9ed3af21985edc2b5563b506369a5e44
-
SHA1
61a2e47af955690c976699a36892093312c0282c
-
SHA256
a4fe243149098e686dc03949add7c5d643ef17cc8357bd566a884107ac8b502c
-
SHA512
a0d9584ec811623c3e7aadcba2dd63de82b301bfe0e7b85a0094c90982563ef1b2dd19a3be61aa02095dc3a3e875d1342f65f0e38d83b7190c381d059568921b
-
SSDEEP
98304:GVw+GrhM4J/nQHoQI8L6ts7JSe+1uEDPEEPxGhM/7f:QqhM4RnQHKLDf2M/7
Score
10/10
Malware Config
Signatures
-
Detect binaries embedding considerable number of cryptocurrency wallet browser extension IDs. 1 IoCs
-
Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers. 1 IoCs
-
Detects executables Discord URL observed in first stage droppers 1 IoCs
-
Detects executables containing SQL queries to confidential data stores. Observed in infostealers 1 IoCs
-
Detects executables containing URLs to raw contents of a Github gist 1 IoCs
-
Detects executables containing possible sandbox system UUIDs 1 IoCs
-
Detects executables referencing virtualization MAC addresses 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2024-06-15_9ed3af21985edc2b5563b506369a5e44_ngrbot_snatch
4f2f006e2ecf7172ad368f8289dc96c1
Headers
Imports
Sections