Overview

overview

10

Static

static

10

17b221cf2b...aa.exe

windows7-x64

10

17b221cf2b...aa.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    17b221cf2b6d5e2fe5fa0aecdf56e9842a0f5092dc14b2b6bcbd902cb8b211aa

  • Size

    642KB

  • MD5

    06d6801605d6e702b524d73bdc12bd28

  • SHA1

    e28f6ab5220b48b36569fcb46fb72ecaa7841913

  • SHA256

    17b221cf2b6d5e2fe5fa0aecdf56e9842a0f5092dc14b2b6bcbd902cb8b211aa

  • SHA512

    73f7df42b55ede3eb81b14537736b025846a2c1f14e1e59c7bb6ffd918c8af43f9e365a562bf6b77fd1058d0a28cf592f6d8c766d40aaccea83bcf9fa405d86b

  • SSDEEP

    12288:ScD663Mr5mr5i38VeUbBGr5i38VeUbBlZ2zkPaCx:Sb3kL3kTZOkl

Score
10/10
#die bitchcybergate

Malware Config

Extracted

Family

cybergate

Version

2.6

Botnet

#Die Bitch

C2

malikluka.zapto.org:81

Mutex

***MUTEX***

Attributes
  • enable_keylogger

    true

  • enable_message_box

    false

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    svchost.exe

  • install_file

    windows.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    texto da mensagem

  • message_box_title

    t?tulo da mensagem

  • password

    abcd1234

Signatures

Files

  • 17b221cf2b6d5e2fe5fa0aecdf56e9842a0f5092dc14b2b6bcbd902cb8b211aa
    .exe windows x86


    Headers

    Sections