Overview

overview

10

Static

static

10

7ff44f51c4...ef.exe

windows7-x64

10

7ff44f51c4...ef.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    7ff44f51c4fdfdd57bf393ed1277d5203246abed396f1f6cb577b8b0aea60bef

  • Size

    283KB

  • MD5

    a092c6c641bc63b0c53e42ecc79f331a

  • SHA1

    be88b42e1b20b41a954eb9032a75c383acd35a26

  • SHA256

    7ff44f51c4fdfdd57bf393ed1277d5203246abed396f1f6cb577b8b0aea60bef

  • SHA512

    d93ac0aa39653f3db6625cd3944a77944656312cda461ff0d62b237ba9dc74471080ee2a804e2088782aa8d049f9f13633be4651db424a801a044901caf190f5

  • SSDEEP

    6144:N4ABF94ipAuO/50BTnqPd0Mpz7qhh4nXjjf8MZ9BKXKi:WUAGLE0kuGnESBi

Score
10/10
[email protected]cybergate

Malware Config

Extracted

Family

cybergate

Version

v1.04.8

C2

192.168.1.71:1700

cybergaterat06.no-ip.biz:1700
Mutex

0B8528D1N50YF5

Attributes
  • enable_keylogger

    true

  • enable_message_box

    false

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    explorer.exe

  • install_dir

    Systeme32

  • install_file

    jamazew.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    Voici votre clé Black Ops 2 Beta ! 2KQT8-HV27P-GTTV9-2WBVV-M7X96

  • message_box_title

    Black Ops 2 Beta

  • password

    14081996

  • regkey_hkcu

    HKCU

  • regkey_hklm

    HKLM

Signatures

Files

  • 7ff44f51c4fdfdd57bf393ed1277d5203246abed396f1f6cb577b8b0aea60bef
    .exe windows x86


    Headers

    Sections