General
-
Target
075ee1bcc596f2448b27c45ecdad2336a53098137e7a952e2fcc0dbb818a544c
-
Size
280KB
-
MD5
00b97df5c37442c3cec89f11b1c53ff5
-
SHA1
059d6877521673679191e19804cd8d261c8203cf
-
SHA256
075ee1bcc596f2448b27c45ecdad2336a53098137e7a952e2fcc0dbb818a544c
-
SHA512
73f7759ffb1732492cee796b36fe99c4213e2e716720c09a4910c15d6862c6d0441543838bc7ead04db229e53fed9e5fee7c1debd1f370c9396f5573c8fb54ae
-
SSDEEP
6144:F3O1ZuoxDNT/xQphU+MYerYctWC201Dxeb/b4N5MCLW/4DOY1ChWde:9Oq4h/xQp6+MYer3201tebT4n1LXP1Cj
Score
10/10
Malware Config
Extracted
Family
cybergate
Version
v1.01.18
Botnet
remote
C2
127.0.0.1:999
Mutex
CyberGate1
Attributes
-
enable_keylogger
true
-
enable_message_box
false
-
ftp_directory
./logs/
-
ftp_interval
30
-
injected_process
explorer.exe
-
install_dir
install
-
install_file
server.exe
-
install_flag
true
-
keylogger_enable_ftp
false
-
message_box_caption
Remote Administration anywhere in the world.
-
message_box_title
CyberGate
-
password
cybergate
Signatures
-
Cybergate family
Files
-
075ee1bcc596f2448b27c45ecdad2336a53098137e7a952e2fcc0dbb818a544c
Headers
Sections