General
-
Target
824abba072926907a6f902352d0a343f9eff212e3a40fc96fe4066d9e8eb12f1
-
Size
281KB
-
MD5
05320b6a3ef92fa25e272dadb4423ed2
-
SHA1
4b0b8216848c335348bdde0e2e03cae52b5e5cf8
-
SHA256
824abba072926907a6f902352d0a343f9eff212e3a40fc96fe4066d9e8eb12f1
-
SHA512
6d8651575c99d5ac42f0aba7fdfe0b271950a0971760cb61c47a8884a663939bcf149468e1f92e48ca9943b6fdf73d4dfcb777079d7048099267314ec666897d
-
SSDEEP
6144:gScrL84mp8D6WGc/YSlIipBReubLzeh7Yy0DMIdeXijP:xcTy78QSVnNyhsFMCeSjP
Score
10/10
Malware Config
Extracted
Family
cybergate
Version
v1.18.0 - Crack Version
Botnet
Hacked
C2
elninio.no-ip.info:6885
Mutex
DG6XTG2U5MU21P
Attributes
-
enable_keylogger
true
-
enable_message_box
false
-
ftp_directory
./logs
-
ftp_interval
30
-
injected_process
explorer.exe
-
install_dir
install
-
install_file
server.exe
-
install_flag
true
-
keylogger_enable_ftp
false
-
message_box_caption
Remote Administration anywhere in the world.
-
message_box_title
CyberGate
-
password
123456
-
regkey_hkcu
HKCU
-
regkey_hklm
HKLM
Signatures
-
Cybergate family
Files
-
824abba072926907a6f902352d0a343f9eff212e3a40fc96fe4066d9e8eb12f1
Headers
Sections