Overview

overview

10

Static

static

10

0ec07de842...13.exe

windows7-x64

10

0ec07de842...13.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0ec07de842dbe80e975652e3746b14f7e3eb713cd4e43e525f85a13f3ac85313

  • Size

    276KB

  • MD5

    773170342a1c75ac8ef5886292a8e8ad

  • SHA1

    5559796e096adc62f155ec0b173d865a39e6586b

  • SHA256

    0ec07de842dbe80e975652e3746b14f7e3eb713cd4e43e525f85a13f3ac85313

  • SHA512

    3653883e58e148d66c331e5ba38cf257eb944c90e7203777f8a650c79e5fcedecab945f0364c1917802f987a27cb91d4d61031c087a00cad02868af7161ef6f0

  • SSDEEP

    6144:8k4qmSIOYdTVaQ6PoIpkWElZ2MCAn6Q4sc9kGOLnyR:P9uFdTJ6P7w2lQJpT

Score
10/10
upxtestecybergate

Malware Config

Extracted

Family

cybergate

Version

2.6

Botnet

teste

C2

seuno-ip.no-ip.org:1000

Mutex

***MUTEX***

Attributes
  • enable_keylogger

    true

  • enable_message_box

    true

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    explorer.exe

  • install_dir

    install

  • install_file

    server.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    Atençao ou seu computador pode ser Bloqueado por ameaça de Malware Cuidado Por seus dados estaram em risco ate suas rede sociais pode estar em risco para poder parar esse erro indenfique o seu model 570 GHA Clike em repetir para Voce estara seguro nb

  • message_box_title

    Um arquivo Foi Detectado

  • password

    123

  • regkey_hkcu

    Win64

  • regkey_hklm

    Win64

Signatures

  • Cybergate family
    cybergate
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Files

  • 0ec07de842dbe80e975652e3746b14f7e3eb713cd4e43e525f85a13f3ac85313
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections