Overview

overview

10

Static

static

10

7939b9e979...a6.exe

windows7-x64

10

7939b9e979...a6.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    7939b9e9798a7d7bf27e5e7061e3351365b66c26ca8bc168d35298cb55d411a6

  • Size

    995KB

  • MD5

    44a2d4477a26837e5b7e14a92c0f1268

  • SHA1

    815c358d8f5bb6941d51dea9aa939575a3ca6a2d

  • SHA256

    7939b9e9798a7d7bf27e5e7061e3351365b66c26ca8bc168d35298cb55d411a6

  • SHA512

    ccb0c6cd5eb647ed819d702c4809722d237fab632280984a6c60909569f52e4a0d5b900a566e08f34a409805ad02d291a5739393e6a7862550af2ebe83d1065d

  • SSDEEP

    6144:POpslFlqnhdBCkWYxuukP1pjSKSNVkq/MVJb:Pwsl0TBd47GLRMTb

Score
10/10
mackaracybergate

Malware Config

Extracted

Family

cybergate

Version

v1.07.5

Botnet

Mackara

C2

metroseksuaali.no-ip.biz:100

Mutex

0U0F10S2L8BFL5

Attributes
  • enable_keylogger

    false

  • enable_message_box

    false

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    explorer.exe

  • install_dir

    install

  • install_file

    server.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    Remote Administration anywhere in the world.

  • message_box_title

    CyberGate

  • password

    123456

Signatures

Files

  • 7939b9e9798a7d7bf27e5e7061e3351365b66c26ca8bc168d35298cb55d411a6
    .exe windows x86


    Headers

    Sections