Overview

overview

10

Static

static

10

6c15dda0b5...77.exe

windows7-x64

10

6c15dda0b5...77.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6c15dda0b535364bce33d78ec471adf14190a8e572f2f2f019f976e0302aff77

  • Size

    299KB

  • MD5

    36b4bfd0d97f91099a4399709fa53dd2

  • SHA1

    777fa2f6a51b4b5433c23480bfbe53dbc7f175dd

  • SHA256

    6c15dda0b535364bce33d78ec471adf14190a8e572f2f2f019f976e0302aff77

  • SHA512

    2720c371eb64fa4edc0c30cc537a02da0d628b2fc580766606474f4e586692125ea8c0e5bf94221c82a7f184bd2d90eba94bbeb125d478961e0bb93e602b6541

  • SSDEEP

    6144:FOpslIlqdhdBCkWYxuukP1pjSKSNVkq/MVJb+:FwslnTBd47GLRMTb+

Score
10/10
cybercybergate

Malware Config

Extracted

Family

cybergate

Version

v1.07.5

Botnet

Cyber

C2

spark1929.no-ip.info:81

spark1929.no-ip.info:82
Mutex

N138L1P6T322Y7

Attributes
  • enable_keylogger

    true

  • enable_message_box

    true

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    explorer.exe

  • install_dir

    WinDir

  • install_file

    Svchost.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    Rawr.

  • message_box_title

    Haha

  • password

    123456

  • regkey_hkcu

    HKCU

  • regkey_hklm

    HKLM

Signatures

Files

  • 6c15dda0b535364bce33d78ec471adf14190a8e572f2f2f019f976e0302aff77
    .exe windows x86


    Headers

    Sections