General
-
Target
47a5e3d01b2066eac8286af0cc908cb352da583c4e5e7d4b7f5e0c5782b73f9f
-
Size
267KB
-
Sample
221120-kvcw1sab8v
-
MD5
4caecc5b279fedfa20e1a1a2fdfbe340
-
SHA1
8b2f2f6bb200c402d7273772b567361945d02ba7
-
SHA256
47a5e3d01b2066eac8286af0cc908cb352da583c4e5e7d4b7f5e0c5782b73f9f
-
SHA512
6966bf7bbdd0d8e8084574265f9155335e99e612b29093fb1752b655e425b8bd03079dd734833aba1f4cf3f3759f4f7c452c3f80dc49ae9aa233da7c70c0d525
-
SSDEEP
6144:TkTmyyl3x/1c7kReB9s5Rt4C5zPiksFI353UsOSeI/v6vIKAjv6S0Sa:oUF1OkcortJzZ75RqOc+D6
Behavioral task
behavioral1
Sample
47a5e3d01b2066eac8286af0cc908cb352da583c4e5e7d4b7f5e0c5782b73f9f.exe
Resource
win7-20221111-en
Malware Config
Extracted
cybergate
v1.02.1
Lammer
virusss.no-ip.org:1413
Pluguin
-
enable_keylogger
true
-
enable_message_box
true
-
ftp_directory
./
-
ftp_interval
30
-
injected_process
explorer.exe
-
install_dir
Drivers
-
install_file
Gerenciador de áudio Realtek.exe
-
install_flag
true
-
keylogger_enable_ftp
false
-
message_box_caption
VOCÊ FOI HACKEADO ...SEU SISTEMA SERÁ FORMATADO.
-
message_box_title
LAMMER
-
password
123
-
regkey_hkcu
FWEJ
-
regkey_hklm
Java[TM] Update
Targets
-
-
Target
47a5e3d01b2066eac8286af0cc908cb352da583c4e5e7d4b7f5e0c5782b73f9f
-
Size
267KB
-
MD5
4caecc5b279fedfa20e1a1a2fdfbe340
-
SHA1
8b2f2f6bb200c402d7273772b567361945d02ba7
-
SHA256
47a5e3d01b2066eac8286af0cc908cb352da583c4e5e7d4b7f5e0c5782b73f9f
-
SHA512
6966bf7bbdd0d8e8084574265f9155335e99e612b29093fb1752b655e425b8bd03079dd734833aba1f4cf3f3759f4f7c452c3f80dc49ae9aa233da7c70c0d525
-
SSDEEP
6144:TkTmyyl3x/1c7kReB9s5Rt4C5zPiksFI353UsOSeI/v6vIKAjv6S0Sa:oUF1OkcortJzZ75RqOc+D6
-