Overview

overview

10

Static

static

10

bc7472fd19...4e.exe

windows7-x64

10

bc7472fd19...4e.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    bc7472fd19599dd044dd846192eeaa803f3f881035ec9e33d3b0ac417f45474e

  • Size

    283KB

  • MD5

    7050d8da76a8e70294f4035448ccc0d0

  • SHA1

    0475805d8a644fe77a2b4afd2f659ffa22be6d1a

  • SHA256

    bc7472fd19599dd044dd846192eeaa803f3f881035ec9e33d3b0ac417f45474e

  • SHA512

    14045066eaaa38b2296a6207df9b45bbd5d332f51751c41b01c97f21e402d6fd7409bdd4eae6308101c1cf3e1299d7edf61baf3b81edbedc9fbe57f2bab3c8e8

  • SSDEEP

    6144:TmcD66RRjb5JGmrpQsK3RD2u270jupCJsCxC/:qcD6636Z2zkPaCx+

Score
10/10
vítimacybergate

Malware Config

Extracted

Family

cybergate

Version

2.6

Botnet

vítima

C2

feiz.linkpc.net:81

Mutex

***MUTEX***

Attributes
  • enable_keylogger

    true

  • enable_message_box

    false

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    explorer.exe

  • install_dir

    install

  • install_file

    server.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    texto da mensagem

  • message_box_title

    título da mensagem

  • password

    abcd1234

Signatures

Files

  • bc7472fd19599dd044dd846192eeaa803f3f881035ec9e33d3b0ac417f45474e
    .exe windows x86


    Headers

    Sections