Overview

overview

10

Static

static

10

64faedd59e...35.exe

windows7-x64

10

64faedd59e...35.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    64faedd59e3e498e61c708398904202afa11f7497d33a3f7b90661551d606d35

  • Size

    283KB

  • MD5

    0ef8389c8922e96eae36c4564ce0d1aa

  • SHA1

    f33ac1d3666e25c0a820cea31f1f5bed739b8026

  • SHA256

    64faedd59e3e498e61c708398904202afa11f7497d33a3f7b90661551d606d35

  • SHA512

    4ca7d1f617addeec95633f07d20a09c2a5d7c52940ff3cf36ce8288ae39d920759bd21d787a78350ca9f42cd3816a2d33252d25bfc611f8d1a3e223938984094

  • SSDEEP

    6144:jmcD66RRjv5JGmrpQsK3RD2u270jupCJsCxCj:acD663OZ2zkPaCxI

Score
10/10
vítimacybergate

Malware Config

Extracted

Family

cybergate

Version

2.6

Botnet

vítima

C2

musek.no-ip.org:465

Mutex

***MUTEX***

Attributes
  • enable_keylogger

    true

  • enable_message_box

    false

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    explorer.exe

  • install_dir

    install

  • install_file

    svchost.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    texto da mensagem

  • message_box_title

    título da mensagem

  • password

    abcd1234

  • regkey_hkcu

    HKCU

  • regkey_hklm

    HKLM

Signatures

Files

  • 64faedd59e3e498e61c708398904202afa11f7497d33a3f7b90661551d606d35
    .exe windows x86


    Headers

    Sections