Overview

overview

10

Static

static

10

0d768b0356...d7.exe

windows7-x64

10

0d768b0356...d7.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0d768b035613a1e209a622d51c8238fbba3f5f52700757c9f22518bc8a3de0d7

  • Size

    310KB

  • MD5

    969c853f98a8e68557528ea3205f07db

  • SHA1

    276f591f270670b893f15520c70d9bea13a453b1

  • SHA256

    0d768b035613a1e209a622d51c8238fbba3f5f52700757c9f22518bc8a3de0d7

  • SHA512

    ab916e974eb9b8fd6661c3603ee55869a5c5506e427117dfa99f87cc163af6b972d1c1d7d3d87ac9737e01507507c68ed0ac6997a8dd8376655ed4c0a5503ac8

  • SSDEEP

    6144:POpslFlqQhdBCkWYxuukP1pjSKSNVkq/MVJb:PwslJTBd47GLRMTb

Score
10/10
formationcybergate

Malware Config

Extracted

Family

cybergate

Version

v1.07.5

Botnet

formation

C2

127.0.0.1:5150

Mutex

F2E8452164M6QG

Attributes
  • enable_keylogger

    true

  • enable_message_box

    false

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    explorer.exe

  • install_dir

    SOLOTION

  • install_file

    SOLITION1.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    Remote Administration anywhere in the world.

  • message_box_title

    CyberGate

  • password

    cybergate

Signatures

Files

  • 0d768b035613a1e209a622d51c8238fbba3f5f52700757c9f22518bc8a3de0d7
    .exe windows x86


    Headers

    Sections