Overview

overview

10

Static

static

10

1c06de6b69...21.exe

windows7-x64

10

1c06de6b69...21.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1c06de6b695c09a396b2c7dfd3b0413fe1ea6c62b73f23233376a8794522b321

  • Size

    352KB

  • MD5

    65ce531dfd94a48228d3861782d2f598

  • SHA1

    11a74ee172b6f6dfae6ce74d20dc99b206fd8f40

  • SHA256

    1c06de6b695c09a396b2c7dfd3b0413fe1ea6c62b73f23233376a8794522b321

  • SHA512

    a5930fba04b185fc9d5ff578f2a9d00dcc9c2f01af508061ffb339ae76c161bd6202531c3413fecaaa781a373559faad2b49e25cff81542ef55c409b70a39e75

  • SSDEEP

    6144:hOpslFlqPGHGk8SIhdBCkWYxuukP1pjSKSNVkq/MVJbi:hwslAOl2TBd47GLRMTbi

Score
10/10
[email protected]cybergate

Malware Config

Extracted

Family

cybergate

Version

v1.07.5

C2

3333lol3333.zapto.org:82

Mutex

A4TN4G06311J1U

Attributes
  • enable_keylogger

    true

  • enable_message_box

    true

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    explorer.exe

  • install_dir

    install

  • install_file

    server.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    ERROR IN SYSTEM32!

  • message_box_title

    ERROR 502

  • password

    piplup121

  • regkey_hkcu

    HKCU

  • regkey_hklm

    HKLM

Signatures

Files

  • 1c06de6b695c09a396b2c7dfd3b0413fe1ea6c62b73f23233376a8794522b321
    .exe windows x86


    Headers

    Sections