Overview

overview

10

Static

static

10

884eac3ff0...ce.exe

windows7-x64

8

884eac3ff0...ce.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    884eac3ff0ec24aa979459e1f0fe9957edfac1153fda33a6e8218f47cfbbccce

  • Size

    427KB

  • MD5

    6a0cef790b4dbbc876161065f2321c80

  • SHA1

    bea5d2cfaa6c8e8a6414be2dce9b7434a9317e09

  • SHA256

    884eac3ff0ec24aa979459e1f0fe9957edfac1153fda33a6e8218f47cfbbccce

  • SHA512

    d3b618a8c7b8caf7b7dab4668e703621262fd9e951428145a6b7f1829857bf849aa31e9546cfb77837ac8d2f427c292d5a9777037bc7b10c86d76e6dab6bd691

  • SSDEEP

    12288:luMwgBi8vvrHxVPKyv2m77sZB07FxObO32b:lHwB8vrx52t07FQaS

Score
10/10
remotecybergate

Malware Config

Extracted

Family

cybergate

Version

v3.4.2.2

Botnet

remote

C2

127.0.0.1:999

Mutex

0IJ383515A8MU1

Attributes
  • enable_keylogger

    false

  • enable_message_box

    true

  • ftp_directory

    ./logs

  • ftp_interval

    30

  • injected_process

    explorer.exe

  • install_dir

    install

  • install_file

    server.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    Remote Administration anywhere in the world.

  • message_box_title

    CyberGate

  • password

    1337l33tpassword

Signatures

Files

  • 884eac3ff0ec24aa979459e1f0fe9957edfac1153fda33a6e8218f47cfbbccce
    .exe windows x86


    Headers

    Sections