Overview

overview

10

Static

static

10

53b23279f0...3b.exe

windows7-x64

10

53b23279f0...3b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    53b23279f01cfcbd97e43a3601e02569ffc7ac00f8676d63031a4b4cfabffd3b

  • Size

    290KB

  • MD5

    963c59e0d22c9a7507017d7825f8096d

  • SHA1

    577798040a065267d51dbf1793516abdfdd20bdd

  • SHA256

    53b23279f01cfcbd97e43a3601e02569ffc7ac00f8676d63031a4b4cfabffd3b

  • SHA512

    3a71e1ae78760e4ca25b42e06a24017901b172ea03c51087943cf06bc4df91c8f537b4875d6def82e37bc113970b00c352bd36295f8eb862ed778072bed9c110

  • SSDEEP

    6144:4mcD66RRjc5JGmrpQsK3RD2u270jupCJsCxCa:RcD6635Z2zkPaCx/

Score
10/10
tawwcybergate

Malware Config

Extracted

Family

cybergate

Version

2.6

Botnet

taww

C2

badeltha.servemp3.com:62616

Mutex

***MUTEX***

Attributes
  • enable_keylogger

    true

  • enable_message_box

    false

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    explorer.exe

  • install_dir

    install

  • install_file

    explore.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    texto da mensagem

  • message_box_title

    título da mensagem

  • password

    ab

Signatures

Files

  • 53b23279f01cfcbd97e43a3601e02569ffc7ac00f8676d63031a4b4cfabffd3b
    .exe windows x86


    Headers

    Sections