Overview

overview

10

Static

static

10

81870af176...cb.exe

windows7-x64

10

81870af176...cb.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    81870af176eab4f61da9c72f8e6f3b4f96cdd02a148003e9883d5f750d512ecb

  • Size

    283KB

  • MD5

    815fbe1ac2407a16b058bb44a771d024

  • SHA1

    10bca23ff406a6af96f3571f452c2345cfe2a9f6

  • SHA256

    81870af176eab4f61da9c72f8e6f3b4f96cdd02a148003e9883d5f750d512ecb

  • SHA512

    b09205b4a89a69ea56ea5eda5b90427e6188fedd196df7d5759a5348dee8df963d6514d50d21489b5f9a5d2298019a272a0f3f0498f2627b1d76749243e8e1d5

  • SSDEEP

    6144:t4ABF94qpAuO/50BTnqPd0Mpz7qhh4nXjjf8MZ9BKXKY:2UAGLE0kuGnESBY

Score
10/10
remotecybergate

Malware Config

Extracted

Family

cybergate

Version

v1.04.8

Botnet

remote

C2

tetedemort.no-ip.biz:999

20835230.no-ip.biz:999
Mutex

03D3ED0P577W2E

Attributes
  • enable_keylogger

    true

  • enable_message_box

    false

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    explorer.exe

  • install_dir

    test

  • install_file

    server.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    Remote Administration anywhere in the world.

  • message_box_title

    CyberGate

  • password

    cybergate

Signatures

Files

  • 81870af176eab4f61da9c72f8e6f3b4f96cdd02a148003e9883d5f750d512ecb
    .exe windows x86


    Headers

    Sections