Overview

overview

10

Static

static

10

97be8deb78...63.exe

windows7-x64

1

97be8deb78...63.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    97be8deb78fef27594034d2936340a3b505db4a263359cc436f811c80d181663

  • Size

    291KB

  • MD5

    28f7c94e6b96804280d66fa6bfe9b9bc

  • SHA1

    a952996c76515d985c9a76489fbb0823a3c7fbb1

  • SHA256

    97be8deb78fef27594034d2936340a3b505db4a263359cc436f811c80d181663

  • SHA512

    489bf803ce2ac20aaeb050177460e139250c6808372ce76dd333bb119182fac1bee820e6e8101e417125f8b958945a39347fabef79d636531fec45cee24ce810

  • SSDEEP

    6144:nmcD66RRDycQEIXKgQjbMbF/UBToREujM5wZl5DLfVq4mExym:mcD66X/eKgQEOk5LfV13ym

Score
10/10
evil2deadcybergate

Malware Config

Extracted

Family

cybergate

Version

2.7 Beta 02

Botnet

evil2dead

C2

evil2dead1.no-ip.biz:88

Mutex

***MUTEX***

Attributes
  • enable_keylogger

    true

  • enable_message_box

    false

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    svchost.exe

  • install_dir

    install

  • install_file

    java.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    texto da mensagem

  • message_box_title

    título da mensagem

  • password

    abcd1234

  • regkey_hkcu

    HKCU

  • regkey_hklm

    HKLM

Signatures

Files

  • 97be8deb78fef27594034d2936340a3b505db4a263359cc436f811c80d181663
    .exe windows x86


    Headers

    Sections