Overview

overview

10

Static

static

10

9ad24b2f9b...41.exe

windows7-x64

10

9ad24b2f9b...41.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    9ad24b2f9b342fd83a6b7ec411963c7cf9b0a7ba2001dfc4e0b8abdd65c60541

  • Size

    296KB

  • MD5

    0f7e76bc45e8272a2611f1ce3c717d98

  • SHA1

    7a3720ebe4ea941ad45a389e721c4315a3cb803b

  • SHA256

    9ad24b2f9b342fd83a6b7ec411963c7cf9b0a7ba2001dfc4e0b8abdd65c60541

  • SHA512

    d67232a14cc818785d00de5b2a04c3cce1b881d18f39957a9d00a7c201e15c94987c82a915ac3fb9de01f9b9947d7e658ad9bb31d4be678fbcb307c7dcc70d29

  • SSDEEP

    6144:/OpslFlqDhdBCkWYxuukP1pjSKSNVkq/MVJbm:/wslyTBd47GLRMTbm

Score
10/10
cybercybergate

Malware Config

Extracted

Family

cybergate

Version

v1.07.5

Botnet

cyber

C2

gugnlinun.no-ip.biz:100

Mutex

7W7GY7R7Y7QS2K

Attributes
  • enable_keylogger

    true

  • enable_message_box

    false

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    explorer.exe

  • install_dir

    WinDir

  • install_file

    gugbhuvi.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    Remote Administration anywhere in the world.

  • message_box_title

    CyberGate

  • password

    123456

  • regkey_hkcu

    HKCU

  • regkey_hklm

    HKLM

Signatures

Files

  • 9ad24b2f9b342fd83a6b7ec411963c7cf9b0a7ba2001dfc4e0b8abdd65c60541
    .exe windows x86


    Headers

    Sections