Overview

overview

10

Static

static

10

51b27f25e2...0a.exe

windows7-x64

10

51b27f25e2...0a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    51b27f25e2a7debd0da9a0660d8f33c27b4ac3b96533ef7fbcea8f6d3b99060a

  • Size

    284KB

  • MD5

    52a321a5ab3044adee12c50fe5a4f387

  • SHA1

    d807d973f25d196884df0214e749ed351bf1e739

  • SHA256

    51b27f25e2a7debd0da9a0660d8f33c27b4ac3b96533ef7fbcea8f6d3b99060a

  • SHA512

    2a25cc34789e98959f01dcb93179425899a838be0d6aed97871f13689155920c23b520ed7b7bef7e3ba251b44af63295de73e4b19ba9c45b36fd27d3db005228

  • SSDEEP

    6144:Uk4qm+PsJQmROT+ICF844FoKrey4aBKkC3ZP8E0bZ6I:395kxOS1CoKeXtcbZJ

Score
10/10
upxçîýçá äæ çí èícybergate

Malware Config

Extracted

Family

cybergate

Version

2.6

Botnet

ÇÎÝÇÁ äæ Çí Èí

C2

127.0.0.1:1990

seen7zeen.no-ip.biz:1990
Mutex

***MUTEX***

Attributes
  • enable_keylogger

    true

  • enable_message_box

    false

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    svchost.exe

  • install_file

    Win_Xp.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    Please try again later.

  • message_box_title

    Error

  • password

    asaad36810

Signatures

  • Cybergate family
    cybergate
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Files

  • 51b27f25e2a7debd0da9a0660d8f33c27b4ac3b96533ef7fbcea8f6d3b99060a
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections