Overview

overview

10

Static

static

10

41f49e3fab...45.exe

windows7-x64

10

41f49e3fab...45.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    41f49e3faba4fd139a2134b32e965b57cc9d0ea07715b6ed42cc23b9df0fc245

  • Size

    296KB

  • MD5

    0923d831f2b0828a549849908f1e8100

  • SHA1

    84c25ca68f3aead54a00d81cef25bdc006732948

  • SHA256

    41f49e3faba4fd139a2134b32e965b57cc9d0ea07715b6ed42cc23b9df0fc245

  • SHA512

    9c1f5e8e010cd09e9cde50edf335d31d300edd2cfcde4fbaa41a951d79837ee9e84d64fe8a27aa760a02367141e0d5e4fbaf4755da2a4216c77ebd2d4f64a927

  • SSDEEP

    6144:POpslFlqUhdBCkWYxuukP1pjSKSNVkq/MVJbo:PwslpTBd47GLRMTbo

Score
10/10
profilocybergate

Malware Config

Extracted

Family

cybergate

Version

v1.07.5

Botnet

profilo

C2

127.0.0.1:999

mimmumat.no-ip.org:82
Mutex

0F75YLMN70C36D

Attributes
  • enable_keylogger

    true

  • enable_message_box

    true

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    explorer.exe

  • install_dir

    install

  • install_file

    server.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    file not to found

  • message_box_title

    errore

  • password

    123456

  • regkey_hkcu

    HKCU

  • regkey_hklm

    HKLM

Signatures

Files

  • 41f49e3faba4fd139a2134b32e965b57cc9d0ea07715b6ed42cc23b9df0fc245
    .exe windows x86


    Headers

    Sections