Overview

overview

10

Static

static

10

bc74e8dffc...80.exe

windows7-x64

10

bc74e8dffc...80.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    bc74e8dffce583e98f8e8fd60810161114dc773eeb83a3e83bc416a693415880

  • Size

    289KB

  • MD5

    db08968c46ea8ec0c3d733fe16e9a8f0

  • SHA1

    9f4884d93105594f82823171c898daefcbe37af2

  • SHA256

    bc74e8dffce583e98f8e8fd60810161114dc773eeb83a3e83bc416a693415880

  • SHA512

    5800e5da9f30d4d028e6e7793d53a5ad9a4837e8b81ff4ad550a286666fbe15268bf211dd90d2c14924b606aacfcc0318eb796786ce11440777682c7e93743f0

  • SSDEEP

    6144:+OpslFlqihdBCkWYxuukP1pjSKSNVkq/MVJb9:+wsl3TBd47GLRMTb9

Score
10/10
sat 20cybergate

Malware Config

Extracted

Family

cybergate

Version

v1.07.5

Botnet

sat 20

C2

oluwalogbon1100.ddns.net:8181

Mutex

7MA1BQT72S40GU

Attributes
  • enable_keylogger

    true

  • enable_message_box

    false

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    explorer.exe

  • install_dir

    install

  • install_file

    server.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    Remote Administration anywhere in the world.

  • message_box_title

    CyberGate

  • password

    12345

Signatures

Files

  • bc74e8dffce583e98f8e8fd60810161114dc773eeb83a3e83bc416a693415880
    .exe windows x86


    Headers

    Sections