Overview

overview

10

Static

static

10

cebe1e1b8b...63.exe

windows7-x64

10

cebe1e1b8b...63.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    cebe1e1b8bcb2a7e0fbec39d7300d637e152377dc3c5d297b425f54b49020463

  • Size

    296KB

  • MD5

    3970ce6202e7ce6cdf1c3ed1cfa24871

  • SHA1

    4e480b1c8e386501691afd1f18b4dcb549fe8544

  • SHA256

    cebe1e1b8bcb2a7e0fbec39d7300d637e152377dc3c5d297b425f54b49020463

  • SHA512

    6bad5db6417710946037a676d930b5be4b0a63c9267490e89eb96d16bd0508c63fb98c291b400884d5030f032cdaf5bab4741365476d9fba2306e02bf8ecb80a

  • SSDEEP

    6144:POpslFlqAhdBCkWYxuukP1pjSKSNVkq/MVJb+:PwslXTBd47GLRMTb+

Score
10/10
cybercybergate

Malware Config

Extracted

Family

cybergate

Version

v1.07.5

Botnet

cyber

C2

aissani.no-ip.biz:999

Mutex

GDA4086GQ3R55W

Attributes
  • enable_keylogger

    true

  • enable_message_box

    false

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    systeme.exe

  • install_dir

    windir

  • install_file

    systeme.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    Remote Administration anywhere in the world.

  • message_box_title

    CyberGate

  • password

    123456

  • regkey_hkcu

    HKCU

  • regkey_hklm

    HKLM

Signatures

Files

  • cebe1e1b8bcb2a7e0fbec39d7300d637e152377dc3c5d297b425f54b49020463
    .exe windows x86


    Headers

    Sections