General
-
Target
9283a8dfe0c585b7141cbce5f720d9b739f056c503b0363707b5764f03b1212f
-
Size
290KB
-
MD5
09ad0d13aebdf31e113f86c82cce32f3
-
SHA1
7f569bcebbcad55d572e43c13a5cec323db3eb6a
-
SHA256
9283a8dfe0c585b7141cbce5f720d9b739f056c503b0363707b5764f03b1212f
-
SHA512
3cfe90144816e1f5ae46c4d0b75c2bfe51c4b7604a3ee3503e2e7e8796052aede4ec3a249fc2a808201a343432d39ef60788841c06dcd1745d93005e19bf127f
-
SSDEEP
6144:YmcD66RRj45JGmrpQsK3RD2u270jupCJsCxCS:xcD663FZ2zkPaCxR
Score
10/10
Malware Config
Extracted
Family
cybergate
Version
2.6
Botnet
victim
C2
pila.zapto.org:288
Mutex
***MUTEX***
Attributes
-
enable_keylogger
true
-
enable_message_box
true
-
ftp_directory
./logs/
-
ftp_interval
30
-
injected_process
explorer.exe
-
install_dir
install
-
install_file
Mozila.exe
-
install_flag
true
-
keylogger_enable_ftp
false
-
message_box_caption
program installed successfully !
-
message_box_title
Photo - Maker
-
password
dzhacker
Signatures
-
Cybergate family
Files
-
9283a8dfe0c585b7141cbce5f720d9b739f056c503b0363707b5764f03b1212f
Headers
Sections