Overview

overview

10

Static

static

10

dd555356dd...0d.exe

windows7-x64

1

dd555356dd...0d.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    dd555356dda7c9f17bf7ab1c14dceaa95a300838756044eb27612b8228a0910d

  • Size

    404KB

  • MD5

    90df29ea2294062818861ab8b8e796f9

  • SHA1

    55770b379272d4cf2c90f00a408a3ad776f6b88c

  • SHA256

    dd555356dda7c9f17bf7ab1c14dceaa95a300838756044eb27612b8228a0910d

  • SHA512

    843f931d1a90555f7d8a49d42bf22c9f1b85d95bbf9f3c72215e834cd78cd85777769ec1ccdfe9e8e1d5f7f6c0d0d8fd8ac6c6df25c0aca918cd62f43934e7cf

  • SSDEEP

    6144:3mcD66RR//22Q5JGmrpQsK3RD2u27rjupCJsCxCzT6/yOuXv6i:WcD66b/22tZ2zrPaCxUT6+yi

Score
10/10
testtt dvgcybergate

Malware Config

Extracted

Family

cybergate

Version

dvg

Botnet

testtt dvg

C2

127.0.0.1:85

bigxan.no-ip.info:85
Mutex

***MUTEX***

Attributes
  • enable_keylogger

    true

  • enable_message_box

    false

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    explorer.exe

  • install_dir

    install

  • install_file

    ver.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    texto da mensagem

  • message_box_title

    título da mensagem

  • password

    abcd1234

  • regkey_hkcu

    dvg

  • regkey_hklm

    dvg

Signatures

Files

  • dd555356dda7c9f17bf7ab1c14dceaa95a300838756044eb27612b8228a0910d
    .exe windows x86


    Headers

    Sections