Overview

overview

10

Static

static

10

865b481038...b5.exe

windows7-x64

8

865b481038...b5.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    865b481038d0f5ca2680abcc12b4a592c1de828af89a96c1ea4ad76ecdf28fb5

  • Size

    428KB

  • MD5

    09652172d43f8102bb3d072acc9a64f1

  • SHA1

    e2737b21c486e85ee1a8a9d3ca0171c8bb0603ed

  • SHA256

    865b481038d0f5ca2680abcc12b4a592c1de828af89a96c1ea4ad76ecdf28fb5

  • SHA512

    401816b52671a3a58a8f968a06c64480509d4a502e935f30fc0fc5d36f8c0d935a08fce5955a96abaf22d019e0504efd1b894922ca7b56a7d8e6c1c8d5a3aa2c

  • SSDEEP

    12288:xuMwcBi8vvrHxVPKyv2m77sZB07FxObO32G:xHwd8vrx52t07FQaR

Score
10/10
remotecybergate

Malware Config

Extracted

Family

cybergate

Version

v3.4.2.2

Botnet

remote

C2

madeforglory.serveftp.com:1178

diiimaria.zapto.org:1178
Mutex

0R3IRVG03UNFTT

Attributes
  • enable_keylogger

    true

  • enable_message_box

    false

  • ftp_directory

    ./logs

  • ftp_interval

    30

  • injected_process

    explorer.exe

  • install_dir

    install

  • install_file

    server.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    Remote Administration anywhere in the world.

  • message_box_title

    CyberGate

  • password

    tarek

Signatures

Files

  • 865b481038d0f5ca2680abcc12b4a592c1de828af89a96c1ea4ad76ecdf28fb5
    .exe windows x86


    Headers

    Sections