Overview

overview

10

Static

static

10

f334abb4ec...da.exe

windows7-x64

10

f334abb4ec...da.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f334abb4ec960307ec44349af08a066f2d5212b475a0aabd920d7961c424f2da

  • Size

    302KB

  • MD5

    2edb6a9347f431aaab805ea3dda96641

  • SHA1

    2de8dfa077f64d375ce171e7e154388bccfac1ae

  • SHA256

    f334abb4ec960307ec44349af08a066f2d5212b475a0aabd920d7961c424f2da

  • SHA512

    38aa7382532743b69797ac36d4aec3ea896fe04205915039e651f078ba7688284184895e749c8bcca1398689da32ee76eca4082b277130cbaecd7604f269bdc0

  • SSDEEP

    6144:UUzytGr5WatFi8+XzPQ3vIYerAzew0qrU4jjwkdMpD+SByH02/M6:UUzyAptFijzWMMPrykqfBL206

Score
10/10
viciacybergate

Malware Config

Extracted

Family

cybergate

Version

-- By Siklis Brahim

Botnet

vicia

C2

10.0.2.15:81

Mutex

nf

Attributes
  • enable_keylogger

    false

  • enable_message_box

    false

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    explorer.exe

  • install_dir

    nb

  • install_file

    gf.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    texto da mensagem

  • message_box_title

    título da mensagem

  • password

    lucia

Signatures

Files

  • f334abb4ec960307ec44349af08a066f2d5212b475a0aabd920d7961c424f2da
    .exe windows x86


    Headers

    Sections