Overview

overview

10

Static

static

10

1e10853541...ba.exe

windows7-x64

1

1e10853541...ba.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    1e1085354123b3687541502edc5c7a835554149e76327ca30e8a3318bbf1b1ba

  • Size

    392KB

  • MD5

    29d2062793034bd9edf6d3a3a7e4b79a

  • SHA1

    1457a1d640ccb4871b8d6db9f3f7fa42bd79df52

  • SHA256

    1e1085354123b3687541502edc5c7a835554149e76327ca30e8a3318bbf1b1ba

  • SHA512

    932a4e0dbef3fde50cfafb1a687addf9cb1e242307b29e692dd484bc1982ccf35565d07767575e24896d9ad42e7fecfe9bed982e183b4885ab538cfe999bc09d

  • SSDEEP

    12288:JcD66PveKgQpqV3IF9D5LfV13y9GOSL5E3pXcN:JSrgQpqVutfVopXcN

Score
10/10
öííåcybergate

Malware Config

Extracted

Family

cybergate

Version

2.7 Beta 02

Botnet

ÖÍíå

C2

kyfen.no-ip.biz:288

unnamed.no-ip.biz:288
Mutex

***MUTEX***

Attributes
  • enable_keylogger

    true

  • enable_message_box

    false

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    Messenger.exe

  • install_dir

    install

  • install_file

    server.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    texto da mensagem

  • message_box_title

    título da mensagem

  • password

    abcd1234

  • regkey_hkcu

    HKCU

  • regkey_hklm

    HKLM

Signatures

Files

  • 1e1085354123b3687541502edc5c7a835554149e76327ca30e8a3318bbf1b1ba
    .exe windows x86


    Headers

    Sections