General
-
Target
f3bd6e2bf8d5d886727ed8e2808dee666d30c5c936b859e09fec733d8e351d46
-
Size
620KB
-
MD5
82854708ac9defe4f10d13b37c8694e7
-
SHA1
7ebe84bdabe6746ef8048ff926aa6a808aeef24f
-
SHA256
f3bd6e2bf8d5d886727ed8e2808dee666d30c5c936b859e09fec733d8e351d46
-
SHA512
6e0f656f72289197021130906e8fb4f2eab45deaf570b76fa543477e355d82603c2febe229b6f85aaa0d6e8e4a5449596af73b7eb0c0a583a75ba02891978663
-
SSDEEP
12288:acD66OZ2zkPaCxyDGCueoYrL/OHpE6E5jX8MuUPybafvY:azZOkl52ooL/OJE3T8WyWo
Score
10/10
Malware Config
Extracted
Family
cybergate
Version
2.6
Botnet
ÖÍíÉ
C2
127.0.0.1:288
mdl3.dyndns-ip.com:288
Mutex
***MUTEX***
Attributes
-
enable_keylogger
true
-
enable_message_box
false
-
ftp_directory
./logs/
-
ftp_interval
30
-
injected_process
svchost.exe
-
install_file
windows.exe
-
install_flag
true
-
keylogger_enable_ftp
false
-
message_box_caption
texto da mensagem
-
message_box_title
t?tulo da mensagem
-
password
abcd1234
Signatures
-
Cybergate family
Files
-
f3bd6e2bf8d5d886727ed8e2808dee666d30c5c936b859e09fec733d8e351d46
Headers
Sections