General
-
Target
40f0b1d3bfd19284730a3fb54f5e1a86807ae2b7e4a4c9260ab4c7a9c28c0797
-
Size
290KB
-
MD5
911d4a157e195560b2066f6399f06c10
-
SHA1
54be076c0926542e8551f3f53a7356427e4375e7
-
SHA256
40f0b1d3bfd19284730a3fb54f5e1a86807ae2b7e4a4c9260ab4c7a9c28c0797
-
SHA512
71aaed81134c7ff537dc717d4523c934690ca38af9c4d39fc40bc7a880ee378e4a52aeeee9137b1a0f04333d5f28e8255ff3940da5357bb66fb5c4a870f198a6
-
SSDEEP
6144:ImcD66RRjG5JGmrpQsK3RD2u270jupCJsCxCE:BcD663/Z2zkPaCxp
Score
10/10
Malware Config
Extracted
Family
cybergate
Version
2.6
Botnet
ÖÍíÉ
C2
spidrman.no-ip.info:288
Mutex
***MUTEX***
Attributes
-
enable_keylogger
true
-
enable_message_box
false
-
ftp_directory
./logs/
-
ftp_interval
30
-
injected_process
svch1111111ost.exe
-
install_file
windo111111ws.exe
-
install_flag
true
-
keylogger_enable_ftp
false
-
message_box_caption
texto da mensagem
-
message_box_title
t?tulo da mensagem
-
password
abcd1234
Signatures
-
Cybergate family
Files
-
40f0b1d3bfd19284730a3fb54f5e1a86807ae2b7e4a4c9260ab4c7a9c28c0797
Headers
Sections