Overview

overview

10

Static

static

10

d8aa8690c6...86.exe

windows7-x64

8

d8aa8690c6...86.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    d8aa8690c6344a169cb19cd2cd478c9e08b5529dfa96148c6bff1fd9c049a786

  • Size

    284KB

  • MD5

    a068b410786260ef8b58d2e9a6c68730

  • SHA1

    d3cd6e0c16400595b917182fbd67e3a152fa0f33

  • SHA256

    d8aa8690c6344a169cb19cd2cd478c9e08b5529dfa96148c6bff1fd9c049a786

  • SHA512

    bb81859121ff71bef90cf7c4eef86c39da3a3e18f74d6ec788d90d1efda9b24deb573615557a07b226d8f10af97471b5b5e618ded7106ee2af5ebf56b003811d

  • SSDEEP

    6144:rocD66RjJcQEIXKgQjCpvD/a9/gw0qrU4jjwpJY3MQAFedshHG/7C:0cD66FUeKgQu7WfPrypJZBeGhHm7C

Score
10/10
vítimacybergate

Malware Config

Extracted

Family

cybergate

Version

1.0 Pro. by Reality Hacker

Botnet

vítima

C2

127.0.0.1:81

Mutex

***MUTEX***

Attributes
  • enable_keylogger

    true

  • enable_message_box

    false

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    explorer.exe

  • install_dir

    install

  • install_file

    server.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    texto da mensagem

  • message_box_title

    título da mensagem

  • password

    abcd1234

Signatures

Files

  • d8aa8690c6344a169cb19cd2cd478c9e08b5529dfa96148c6bff1fd9c049a786
    .exe windows x86


    Headers

    Sections