Overview

overview

10

Static

static

10

956-71-0x0...ry.exe

windows7-x64

1

956-71-0x0...ry.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    956-71-0x0000000000200000-0x0000000000271000-memory.dmp

  • Size

    452KB

  • MD5

    8dd8b9b932429b82b36739cdee16b8f8

  • SHA1

    edbb4195650d190221b3e3d786bcedbb71d58d0e

  • SHA256

    3f18239ed49c840b7ac9a02165e4b053ce58f5408b8288cef5f2ef18a819e925

  • SHA512

    0e4259a2a7e34f1d01d833e9cfc39c9be0a51c082602dceb305b4457dfd7c709bcfe7b5acb42140f0db2c2fdff5e35daed1c7e33f187c53bf7deb1c597d52155

  • SSDEEP

    12288:FuMwQBi8vvrHxVPKyv2m77sZB07FxObO32:FHwx8vrx52t07FQa

Score
10/10
remotecybergate

Malware Config

Extracted

Family

cybergate

Version

v3.4.2.2

Botnet

remote

C2

asade.no-ip.org:25565

Mutex

6V0GC234T62RSO

Attributes
  • enable_keylogger

    true

  • enable_message_box

    false

  • ftp_directory

    ./logs

  • injected_process

    explorer.exe

  • install_dir

    system

  • install_file

    windows

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    Remote Administration anywhere in the world.

  • message_box_title

    CyberGate

  • password

    cybergate

Signatures

Files

  • 956-71-0x0000000000200000-0x0000000000271000-memory.dmp
    .exe windows x86


    Headers

    Sections