Overview

overview

10

Static

static

10

068cac593b...54.exe

windows7-x64

10

068cac593b...54.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    068cac593b0676a084494b5fee69b2eccae4cf8b4c4f0f0ca7d32e835453e654

  • Size

    1.2MB

  • MD5

    812ec05150528760d262b2420e27c186

  • SHA1

    9db4e95773e53fed036d6c7ae3c350f72a3feb64

  • SHA256

    068cac593b0676a084494b5fee69b2eccae4cf8b4c4f0f0ca7d32e835453e654

  • SHA512

    17c0b33bff11c8e899db8a5c958925c2d1e0889db0c2d54b165c30b0d1759229c407dfb3f3293ae241c4c26e76bf24b419e3cc47860534be871451ba7402b19b

  • SSDEEP

    24576:co7U2nmmiU2nmmxYuILKs/PVLoHvFU2nmmxYuILKs/PVLoHvT5Prznj/27R:F75M5LrILhPpIvF5LrILhPpIvT5P/jsR

Score
10/10
=pcybergate

Malware Config

Extracted

Family

cybergate

Version

2.7 J/M SE

Botnet

=P

C2

briico.no-ip.info:82

Mutex

JoKeR/M@SK

Attributes
  • enable_keylogger

    false

  • enable_message_box

    false

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    explorer.exe

  • install_dir

    install

  • install_file

    intel cor.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    texto da mensagem

  • message_box_title

    título da mensagem

  • password

    112233

Signatures

Files

  • 068cac593b0676a084494b5fee69b2eccae4cf8b4c4f0f0ca7d32e835453e654
    .exe windows x86


    Headers

    Sections