Overview

overview

10

Static

static

10

c60758b054...6a.exe

windows7-x64

10

c60758b054...6a.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c60758b0545a0adc553b90c7bd806ca84885b68987d7ca9d4c15f129a30a186a

  • Size

    284KB

  • MD5

    96ec6eb7b0b3dcf17a259533050f12d7

  • SHA1

    90dbfe8de4db0c1a4651d3dbb02dbe24b2faca14

  • SHA256

    c60758b0545a0adc553b90c7bd806ca84885b68987d7ca9d4c15f129a30a186a

  • SHA512

    11cd6481905af5875ede099a33e84b05719b58f4373d060d39ddd39af98b847d1e00adc9c8748843723d562018be49f3ac2f47a93de86e14676ce6411a1c8f22

  • SSDEEP

    6144:qk4qmMN8WNcFIMBfBHRtKwY4ZpZbdGhxcU/HiD/EVPzK:19NVSFIMTHRXRdGhaC7VP

Score
10/10
upxöííécybergate

Malware Config

Extracted

Family

cybergate

Version

2.6

Botnet

ÖÍíÉ

C2

astora.zapto.org:288

Mutex

***MUTEX***

Attributes
  • enable_keylogger

    true

  • enable_message_box

    false

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    svchost.exe

  • install_file

    windows.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    texto da mensagem

  • message_box_title

    título da mensagem

  • password

    abcd1234

Signatures

  • Cybergate family
    cybergate
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Files

  • c60758b0545a0adc553b90c7bd806ca84885b68987d7ca9d4c15f129a30a186a
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections