Overview

overview

10

Static

static

10

e58bab4e42...be.exe

windows7-x64

10

e58bab4e42...be.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    e58bab4e427a43a8c7684600d31b37bcf1e0cd1d806ae9e5e78bd9f5145ff1be

  • Size

    290KB

  • MD5

    80dbd8a11b6167dab540f38cf3c17b42

  • SHA1

    6d3cdeb49be08190f4a4a042a5b7b64badbd570b

  • SHA256

    e58bab4e427a43a8c7684600d31b37bcf1e0cd1d806ae9e5e78bd9f5145ff1be

  • SHA512

    9ac4043242c771af27c7c7484379469bd2b7681de18667a12d4cdea5c7ad19ab762e45cf49e90ec489538072c37e87c2edf7cf844fa8a31fd15ed2ce19389e02

  • SSDEEP

    6144:4mcD66RRjyYwPC7BdYwwsiYGBToREujB5wZl5DLfVq4mET1f:RcD663yYeC7Blwsi9D5LfV1F1f

Score
10/10
vítimacybergate

Malware Config

Extracted

Family

cybergate

Version

2.7 Beta 02

Botnet

vítima

C2

hacker15a.zapto.org:1425

Mutex

***MUTEX***

Attributes
  • enable_keylogger

    true

  • enable_message_box

    false

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    explorer.exe

  • install_dir

    1254

  • install_file

    Explorer.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    texto da mensagem

  • message_box_title

    título da mensagem

  • password

    closed

  • regkey_hkcu

    HKCU

  • regkey_hklm

    HKLM

Signatures

Files

  • e58bab4e427a43a8c7684600d31b37bcf1e0cd1d806ae9e5e78bd9f5145ff1be
    .exe windows x86


    Headers

    Sections