General
-
Target
e21151f6b618f21b44ddf44863268e9bc9684bda0c98fd832cd915f2386f8b07
-
Size
306KB
-
MD5
07fd19dd62bf3d460b8d9ac443b8bf96
-
SHA1
59b51d483c2b5d6b4d0568db7eb814c1691fb089
-
SHA256
e21151f6b618f21b44ddf44863268e9bc9684bda0c98fd832cd915f2386f8b07
-
SHA512
7ec00df319da54428affffc9abd707b3040e300a42e2f3dab34f34ccfd42fa032828a680983c0142b4bf0732a4ae798cee0ce95e7dcdd1afae1da6ac7d8c22a6
-
SSDEEP
6144:Dy+phmD68wVTwlTLfkixFUQKf3D7TnBAZ5qhbxr:u+p4D68wV0lYixsfvDBAzK9r
Score
10/10
Malware Config
Extracted
Family
cybergate
Version
v1.11.0 - Public Version
Botnet
dehzcker
C2
dehzcker.no-ip.org:100
Mutex
12R7C267C48H6U
Attributes
-
enable_keylogger
true
-
enable_message_box
false
-
ftp_directory
./logs
-
ftp_interval
30
-
injected_process
explorer.exe
-
install_dir
MSN
-
install_file
svchost.exe
-
install_flag
true
-
keylogger_enable_ftp
false
-
message_box_caption
Remote Administration anywhere in the world.
-
message_box_title
CyberGate
-
password
skaten4fun
-
regkey_hkcu
HKCU
-
regkey_hklm
HKLM
Signatures
-
Cybergate family
Files
-
e21151f6b618f21b44ddf44863268e9bc9684bda0c98fd832cd915f2386f8b07
Headers
Sections