Overview

overview

10

Static

static

10

330f224091...fd.exe

windows7-x64

10

330f224091...fd.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    330f224091e56338dbc911ac4192f008b4cc79c81fa7bfd8c1907ec923572ffd

  • Size

    284KB

  • MD5

    914093d7dc194cc558b959b9528ab6ba

  • SHA1

    715a4cce2c0e74adcfdcf8a9bac1db0bd56f9ae3

  • SHA256

    330f224091e56338dbc911ac4192f008b4cc79c81fa7bfd8c1907ec923572ffd

  • SHA512

    cb552b548e12dac2606a81d84da99a609c542c51064d7f6a59fb6a6af4f1072e3bbd91aa58e1cb2d916439c1a7a54ecaf6866f2067cce68e2c681d41d4f2b5aa

  • SSDEEP

    6144:kk4qm/WqjtGijHT6XOeFnEJngT7hWWDMmy839V1vq3Q:n9QWdCuengT75VI3Q

Score
10/10
upxöííécybergate

Malware Config

Extracted

Family

cybergate

Version

2.6

Botnet

ÖÍíÉ

C2

hint.zapto.org:288

Mutex

***MUTEX***

Attributes
  • enable_keylogger

    true

  • enable_message_box

    false

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    svchost.exe

  • install_file

    windows.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    texto da mensagem

  • message_box_title

    t?tulo da mensagem

  • password

    814751

Signatures

  • Cybergate family
    cybergate
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Files

  • 330f224091e56338dbc911ac4192f008b4cc79c81fa7bfd8c1907ec923572ffd
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections