Overview

overview

10

Static

static

10

9ea428a935...86.exe

windows7-x64

10

9ea428a935...86.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    9ea428a935614f68a11b4625b8c7cf13db682ecb2e68ca137834506730e9bc86

  • Size

    290KB

  • MD5

    57b28187f0859699dd2a39e47d89a4e7

  • SHA1

    b20e19a3122d2664d1636c81ca7b6a223ade836f

  • SHA256

    9ea428a935614f68a11b4625b8c7cf13db682ecb2e68ca137834506730e9bc86

  • SHA512

    4a8675f378df20d41532465e59ac60072c21aa5424873499f276cca8da2eea65268e1c9a86b47d03e7fdc72cf53a3b46e7ad78cf41d1e8f8dbe2a0b7b9f84204

  • SSDEEP

    6144:ZmcD66RcQ5JGmrpQsK3RD2u270jupCJsCxC:8cD66KZ2zkPaCx

Score
10/10
hackpord2410cybergate

Malware Config

Extracted

Family

cybergate

Version

2.6

Botnet

hackpord2410

C2

facbook.servecounterstrike.com:81

Mutex

***MUTEX***

Attributes
  • enable_keylogger

    true

  • enable_message_box

    true

  • ftp_directory

    ./MP9/

  • ftp_interval

    60

  • injected_process

    explorer.exe

  • install_dir

    install

  • install_file

    System32.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    ok

  • message_box_title

    título da mensagem

  • password

    johnkelly2410

  • regkey_hkcu

    HKCU

  • regkey_hklm

    HKLM

Signatures

Files

  • 9ea428a935614f68a11b4625b8c7cf13db682ecb2e68ca137834506730e9bc86
    .exe windows x86


    Headers

    Sections