Overview

overview

10

Static

static

10

4dcfbff855...64.exe

windows7-x64

10

4dcfbff855...64.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    4dcfbff855b9f190e5d93c4287e119ae424809b141f08f5cd9e4a9e4f2c65864

  • Size

    649KB

  • MD5

    06c2243f071e21c079828c4919f99913

  • SHA1

    86db6ad32602569ec1120af0d119f864095cd044

  • SHA256

    4dcfbff855b9f190e5d93c4287e119ae424809b141f08f5cd9e4a9e4f2c65864

  • SHA512

    5d905f59195cd092ef4b4e8d1a19e2c2175134a8fed07dc6da4639129d9489763708e622b0c6892e69f4f0563089b286a4e9f5aea54578a722fd02848a54de99

  • SSDEEP

    12288:qcD6634Q4dLOSwCDfJqlE6uGiGSAlVLuBRzXA2oAMHVB66EYAUTS9D/ksSzQRB:qjLtwCc26uGi2VCHXSBzTaDMsAQRB

Score
10/10
baptistecybergate

Malware Config

Extracted

Family

cybergate

Version

2.7 Final

Botnet

baptiste

C2

m0d-geek.no-ip.biz:80

m0d-geek.no-ip.biz:81

m0d-geek.no-ip.biz:82

m0d-geek.no-ip.biz:83

m0d-geek.no-ip.biz:84
Mutex

***MUTEX***

Attributes
  • enable_keylogger

    true

  • enable_message_box

    false

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    explorer.exe

  • install_dir

    install

  • install_file

    server.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    votre systeme windows n'est pas asser puissant pour lire ce logiciel

  • message_box_title

    erreur windows

  • password

    123

Signatures

Files

  • 4dcfbff855b9f190e5d93c4287e119ae424809b141f08f5cd9e4a9e4f2c65864
    .exe windows x86


    Headers

    Sections