Overview

overview

10

Static

static

10

7b36b53b2c...97.exe

windows7-x64

8

7b36b53b2c...97.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    7b36b53b2c4e46ef519561fe99b0d3ed0e4f03900978c7e44c7ee5b8bf325697

  • Size

    301KB

  • MD5

    2bd996f28b9e31c810343087184ff303

  • SHA1

    db063fa3f8bc216847b9c9e6cd00a6de1eaff36a

  • SHA256

    7b36b53b2c4e46ef519561fe99b0d3ed0e4f03900978c7e44c7ee5b8bf325697

  • SHA512

    44600793aba4bd90db47aa1ed0e60a2837a4e49b4e08735fb509ce6a11c23d23148ca8abc81b7aa6c6f6d0b6205df44c01c04b6b597cd0dd9049da8157e58fc4

  • SSDEEP

    6144:smcD66RRjN5JGmrpQsK3RD2u270jupCJsCxCs:dcD663YZ2zkPaCxj

Score
10/10
åáç æûáçcybergate

Malware Config

Extracted

Family

cybergate

Version

2.6

Botnet

åáÇ æÛáÇ

C2

vip6554.no-ip.info:288

Mutex

***MUTEX***

Attributes
  • enable_keylogger

    true

  • enable_message_box

    true

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    svchost.exe

  • install_file

    windows.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    hghg so like dont hgfgd dstr

  • message_box_title

    ÇÚÏ ÇáãÍÇæáå

  • password

    147000

  • regkey_hkcu

    HKCU

  • regkey_hklm

    HKLM

Signatures

Files

  • 7b36b53b2c4e46ef519561fe99b0d3ed0e4f03900978c7e44c7ee5b8bf325697
    .exe windows x86


    Headers

    Sections