Overview

overview

10

Static

static

10

331462e26e...0b.exe

windows7-x64

331462e26e...0b.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target
    331462e26ebb1bcc7bc0800b52b4ec376024c9221e853ac22f09b1bd9fb2320b
  • Size 217KB
  • Sample221004-hsab1ageg7
  • SHA256 331462e26ebb1bcc7bc0800b52b4ec376024c9221e853ac22f09b1bd9fb2320b
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
1cybergate

Malware Config

Extracted

Family

  • cybergate

Version

  • v1.07.5

Botnet

  • 1

C2

  • 94.102.0.56:82

Mutex

  • VE8548240R1EI6

Attributes
  • enable_keylogger

    true

  • enable_message_box

    false

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    explorer.exe

  • install_dir

    install

  • install_file

    server.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    Remote Administration anywhere in the world.

  • message_box_title

    CyberGate

  • password

    1

Signatures

File Explorer

  • 331462e26ebb1bcc7bc0800b52b4ec376024c9221e853ac22f09b1bd9fb2320b
    .exe 217KB

331462e26ebb1bcc7bc0800b52b4ec376024c9221e853ac22f09b1bd9fb2320b

  • SHA256 331462e26ebb1bcc7bc0800b52b4ec376024c9221e853ac22f09b1bd9fb2320b
  • MD5 SHA1 SHA512 SSDEEP
windowsx86
Minor OS version
Major OS version
Entry point
57768
Magic Number
267
Subsystem
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI
PDB paths