Overview

overview

10

Static

static

10

ad59352866...13.exe

windows7-x64

10

ad59352866...13.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ad59352866dd1bab92abbabeb97d0830a4692ada123ae4ce8e59c7541aa01513

  • Size

    469KB

  • MD5

    6f983a3c3319b951bf066af0f758e737

  • SHA1

    4e45daca77fd5da26fc31ec1086136568a53d775

  • SHA256

    ad59352866dd1bab92abbabeb97d0830a4692ada123ae4ce8e59c7541aa01513

  • SHA512

    1cf8d1e3ed3485b1fd33e7ba61bd2d4360f7055bb4a057f110fb79e238336efb40b41779dd4d8f3468b749718b8a7291a71a35a5ee7e05e732bfe2276625db86

  • SSDEEP

    12288:5wslNTBd47GLRMTbjOxY9MTbytHFuzFIU2HBdr:6slbd474mfjO/TbytHWFV27r

Score
10/10
pussy.cybergate

Malware Config

Extracted

Family

cybergate

Version

v1.07.5

Botnet

PUSSY.

C2

z1l.no-ip.biz:1337

Mutex

N8VYT7UL6IYKH0

Attributes
  • enable_keylogger

    true

  • enable_message_box

    false

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    explorer.exe

  • install_dir

    WinDir

  • install_file

    Svchost.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    Remote Administration anywhere in the world.

  • message_box_title

    CyberGate

  • password

    123456

  • regkey_hkcu

    HKCU

  • regkey_hklm

    HKLM

Signatures

Files

  • ad59352866dd1bab92abbabeb97d0830a4692ada123ae4ce8e59c7541aa01513
    .exe windows x86


    Headers

    Sections