Overview

overview

10

Static

static

10

47b51ea53b...b0.exe

windows7-x64

8

47b51ea53b...b0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    47b51ea53bf7ed7abb71fcfb337e22cd0d66cd3aa8196f71544ed7f3334c39b0

  • Size

    296KB

  • MD5

    0c2287bac04e9eee70f6752d9c20f5a1

  • SHA1

    225921f5ca4aaf4a9cb2d86aff508aaed38d2ef2

  • SHA256

    47b51ea53bf7ed7abb71fcfb337e22cd0d66cd3aa8196f71544ed7f3334c39b0

  • SHA512

    14f91108f70541748c38edee4ce77293d754dc99afd411f7e44be1dc7cb59885e4bea52c3c6174b9ea3e4187bd112511d3947e9d0884f93142376ff5297f3424

  • SSDEEP

    6144:POpslFlqfhdBCkWYxuukP1pjSKSNVkq/MVJb6:PwslkTBd47GLRMTb6

Score
10/10
cybercybergate

Malware Config

Extracted

Family

cybergate

Version

v1.07.5

Botnet

Cyber

C2

1649523.no-ip.org:2206

Mutex

718TATH52CD83F

Attributes
  • enable_keylogger

    true

  • enable_message_box

    false

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    explorer.exe

  • install_dir

    install

  • install_file

    Parrot

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    Remote Administration anywhere in the world.

  • message_box_title

    CyberGate

  • password

    1alpha1

Signatures

Files

  • 47b51ea53bf7ed7abb71fcfb337e22cd0d66cd3aa8196f71544ed7f3334c39b0
    .exe windows x86


    Headers

    Sections