Overview

overview

10

Static

static

10

7d11932f16...f1.exe

windows7-x64

3

7d11932f16...f1.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    7d11932f16880ca21ed9734d7d2880b0665cc414130bed22b2c3f750a9a92ff1

  • Size

    649KB

  • MD5

    0675b401c5e0dbaedbe8c75ab91915d4

  • SHA1

    82166f49f8c3211f257f1a913d90757252abdd4d

  • SHA256

    7d11932f16880ca21ed9734d7d2880b0665cc414130bed22b2c3f750a9a92ff1

  • SHA512

    f38020e3f0bcc67fb94f2cf689496af788521df8b67d8e6877e9a89f803801a559246e0715dce49d456efc9b6e8717b8567f285e5a0e750dd9c8cd7d212f31b9

  • SSDEEP

    12288:wcD663hQ4dLOSwCDfJqlE6uGiGSAlVLuBRzXA2oAMHVB66EYAUTS9D/ksSzQRE:wWLtwCc26uGi2VCHXSBzTaDMsAQRE

Score
10/10
victimcybergate

Malware Config

Extracted

Family

cybergate

Version

2.7 Final

Botnet

victim

C2

127.0.0.1:81

hacker-lachhab.no-ip.info:81
Mutex

***MUTEX***

Attributes
  • enable_keylogger

    true

  • enable_message_box

    false

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    explorer.exe

  • install_dir

    install

  • install_file

    server.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    texto da mensagem

  • message_box_title

    título da mensagem

  • password

    123456

  • regkey_hkcu

    HKCU

  • regkey_hklm

    HKLM

Signatures

Files

  • 7d11932f16880ca21ed9734d7d2880b0665cc414130bed22b2c3f750a9a92ff1
    .exe windows x86


    Headers

    Sections