Overview

overview

10

Static

static

10

8be0b92d26...6c.exe

windows7-x64

10

8be0b92d26...6c.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    8be0b92d26a0a9b298aad5ad0b5b0c023f0a70843773b877c6244ac4254bf56c

  • Size

    283KB

  • MD5

    a2ff9d9cdcf37d01442a80ea77d869f0

  • SHA1

    fa311fef70f1547761bbb8fae429b18ee5757fea

  • SHA256

    8be0b92d26a0a9b298aad5ad0b5b0c023f0a70843773b877c6244ac4254bf56c

  • SHA512

    2e205701fa7c57c72d7d12c150fa4ae24d065240f6cfc709072dbf2d818454f1ba659328671dfc0836105d57342adf27b8caba006b65a40538c7834b222b24e2

  • SSDEEP

    6144:jmcD66RRjg5JGmrpQsK3RD2u270jupCJsCxCS:acD663dZ2zkPaCxl

Score
10/10
vítimacybergate

Malware Config

Extracted

Family

cybergate

Version

2.6

Botnet

vítima

C2

hichem123.no-ip.org:81

Mutex

windows

Attributes
  • enable_keylogger

    true

  • enable_message_box

    true

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    explorer.exe

  • install_dir

    install

  • install_file

    server.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    texto da mensagem

  • message_box_title

    título da mensagem

  • password

    abcd1234

  • regkey_hkcu

    HKCU

  • regkey_hklm

    HKLM

Signatures

Files

  • 8be0b92d26a0a9b298aad5ad0b5b0c023f0a70843773b877c6244ac4254bf56c
    .exe windows x86


    Headers

    Sections