Overview

overview

10

Static

static

10

199ff62998...e8.exe

windows7-x64

10

199ff62998...e8.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    199ff62998feb6b7ee396d1a944dc5d473718439ecfd10a0949ac0d1db8fbee8

  • Size

    276KB

  • MD5

    0e8aa89794457cf41b6fe1ff7130a51f

  • SHA1

    6ddf742bf45add1c0f58422dd8fec1322d0c4078

  • SHA256

    199ff62998feb6b7ee396d1a944dc5d473718439ecfd10a0949ac0d1db8fbee8

  • SHA512

    3ba50c50289cb3ee5463ff85012c360ef4ec14e8e45bd62cb23a00c16d21cd13a42263f81116df807fd6e01f34bb389620ff51ec38a4802d01d66604092b4f64

  • SSDEEP

    6144:P4ABF94I3pAuO/50BTnyZsSaXhh4XAS79hO9R0O91FG+x:AUqGLyWSKaAS79MEqfGI

Score
10/10
remotecybergate

Malware Config

Extracted

Family

cybergate

Version

v1.05.1

Botnet

remote

C2

0022098.zapto.org:8080

Mutex

1WWCWI087F477B

Attributes
  • enable_keylogger

    true

  • enable_message_box

    true

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    explorer.exe

  • install_dir

    install

  • install_file

    server.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    system is unable to install "Unknown error occured"

  • message_box_title

    Windows error!!!

  • password

    qwerty

Signatures

Files

  • 199ff62998feb6b7ee396d1a944dc5d473718439ecfd10a0949ac0d1db8fbee8
    .exe windows x86


    Headers

    Sections