Overview

overview

10

Static

static

10

e3d364cfc1...d4.exe

windows7-x64

10

e3d364cfc1...d4.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    e3d364cfc1437f10dca6400e28451075224ba80596a59efb7c3309f83bbfa7d4

  • Size

    299KB

  • MD5

    83e1fae0be9914bab6f3dcfb7c6eefe3

  • SHA1

    49a41b6a33b7078b5e3f8b88fc4872c30042194a

  • SHA256

    e3d364cfc1437f10dca6400e28451075224ba80596a59efb7c3309f83bbfa7d4

  • SHA512

    1da313e90f165aea74ecc50473b60b7dd2920c7ca6e8b51bb8cf39f17532ce3474b6f1bae1945d8c5fe4ae4430e4960a91c56e04d0d2f69bc81a3adbec6806f0

  • SSDEEP

    6144:POpslFlqJhdBCkWYxuukP1pjSKSNVkq/MVJbE:Pwsl0TBd47GLRMTbE

Score
10/10
cybercybergate

Malware Config

Extracted

Family

cybergate

Version

v1.07.5

Botnet

Cyber

C2

dholanmahi.no-ip.biz:5111

Mutex

4D367V8IN8BN3E

Attributes
  • enable_keylogger

    true

  • enable_message_box

    true

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    explorer.exe

  • install_dir

    install

  • install_file

    server.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    Remote Administration anywhere in the world.

  • message_box_title

    CyberGate

  • password

    123456

Signatures

Files

  • e3d364cfc1437f10dca6400e28451075224ba80596a59efb7c3309f83bbfa7d4
    .exe windows x86


    Headers

    Sections