Overview

overview

10

Static

static

10

51a7d01097...67.exe

windows7-x64

10

51a7d01097...67.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    51a7d010972a974bb1f5397c3988bb9a00dc1bac06d81731f05c92b7052e5e67

  • Size

    284KB

  • MD5

    05e1fdc78ba2d6501eab9e8abb553db6

  • SHA1

    026f2f34894c4172a07212c011dd1b2493e2ccdb

  • SHA256

    51a7d010972a974bb1f5397c3988bb9a00dc1bac06d81731f05c92b7052e5e67

  • SHA512

    ba04389f234e970a68d76337bc3cc46ebc6a66e3f20667fec3680270a24ffa663838b885b3361fcbf216a720ae625bdbce4bf156725209e773c38f123a477596

  • SSDEEP

    6144:DmcD66RRjHcQEIXKgQjjXYj91EBToREujB5wZl5DLfVq4mExys:6cD663GeKgQnEb+D5LfV13ys

Score
10/10
hack-microcybergate

Malware Config

Extracted

Family

cybergate

Version

2.7 Beta 02

Botnet

HacK-MicrO

C2

127.0.0.1:81

alzahar77.no-ip.biz:81
Mutex

***MUTEX***

Attributes
  • enable_keylogger

    true

  • enable_message_box

    false

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    svchost.exe

  • install_dir

    Microsoft

  • install_file

    Microsoft.bat

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    texto da mensagem

  • message_box_title

    título da mensagem

  • password

    abcd1234

Signatures

Files

  • 51a7d010972a974bb1f5397c3988bb9a00dc1bac06d81731f05c92b7052e5e67
    .exe windows x86


    Headers

    Sections