Overview

overview

10

Static

static

10

17de18c9bf...5c.exe

windows7-x64

10

17de18c9bf...5c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    17de18c9bf62f6ac944d10eff65b01f512662d10bf332f2c161760725d19cd5c

  • Size

    301KB

  • MD5

    0dd48b1e9dcc4a46ae4dce57fa405000

  • SHA1

    7baaef216ca2eb4be5cbc3e25c12e0ff668cf276

  • SHA256

    17de18c9bf62f6ac944d10eff65b01f512662d10bf332f2c161760725d19cd5c

  • SHA512

    308b60ca7e63983ee0e6e313958c3b844131e806f47dc3e3eb27272d2424506182c4ff6b2d1d18ed5100452e8e4ce77dd0ef4ed8fc8490e43a9fa183fd1dfdef

  • SSDEEP

    6144:MmcD66RRjs5JGmrpQsK3RD2u270jupCJsCBCS:9cD663pZ2zkPaCBR

Score
10/10
222222cybergate

Malware Config

Extracted

Family

cybergate

Version

2.6

Botnet

222222

C2

127.0.0.1:81

Mutex

***MUTEX***

Attributes
  • enable_keylogger

    true

  • enable_message_box

    false

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    svchost.exe

  • install_dir

    new

  • install_file

    Win_Xp.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    Please try again later.

  • message_box_title

    Error

  • password

    abcd1234

  • regkey_hkcu

    HKCU

  • regkey_hklm

    HKLM

Signatures

Files

  • 17de18c9bf62f6ac944d10eff65b01f512662d10bf332f2c161760725d19cd5c
    .exe windows x86


    Headers

    Sections