General
-
Target
45224d01ea2cab9252ea9eecebc99efbae62d1f81cd3991d7ef7c77ff51d7d15
-
Size
318KB
-
MD5
0203bb1af4ba316a9de30f51c90deae2
-
SHA1
7b33a48153390e603dddd9a67630861acc2f5e57
-
SHA256
45224d01ea2cab9252ea9eecebc99efbae62d1f81cd3991d7ef7c77ff51d7d15
-
SHA512
72b6fbadf88f30ae8b20644ad60b51c632350a983903cfe9ba7ab68cc2b92d757e9523bb7e2b582c7c1890047fadbcd3806861afbf945bab711c192f54248a3a
-
SSDEEP
6144:EOpslFlq2MNhdBCkWYxuukP1pjSKSNVkq/MVJbe:EwslTMNTBd47GLRMTbe
Score
10/10
Malware Config
Extracted
Family
cybergate
Version
v1.07.5
Botnet
remote
C2
jamee.no-ip:83
Mutex
CyberGate1
Attributes
-
enable_keylogger
true
-
enable_message_box
false
-
ftp_directory
./logs/
-
ftp_interval
30
-
injected_process
explorer.exe
-
install_dir
install
-
install_file
server.exe
-
install_flag
true
-
keylogger_enable_ftp
false
-
message_box_caption
Remote Administration anywhere in the world.
-
message_box_title
CyberGate
-
password
cybergate
Signatures
-
Cybergate family
Files
-
45224d01ea2cab9252ea9eecebc99efbae62d1f81cd3991d7ef7c77ff51d7d15
Headers
Sections