General
-
Target
de46eba083a79ba0ec9bb7cb2bad74ab1cb7a0afbca5a0e4c737aedf0e606960
-
Size
289KB
-
MD5
1911154f929446656016076bc150ca41
-
SHA1
61a554fe86fcdedad854cfecc46612ef9598c2a8
-
SHA256
de46eba083a79ba0ec9bb7cb2bad74ab1cb7a0afbca5a0e4c737aedf0e606960
-
SHA512
86fbe5d7cffbabb98193c74a113a3b02b07387c2962b05e40f74d5c573b8fde92aae387630abedf0664108824993c03072906f4b42c7a58f29fb39c7197dcfdd
-
SSDEEP
6144:mOpslFlqlhdBCkWYxuukP1pjSKSNVkq/MVJbO:mwslGTBd47GLRMTbO
Score
10/10
Malware Config
Extracted
Family
cybergate
Version
v1.07.5
Botnet
wowsers
C2
15121983.no-ip.biz:100
thesexyone.myvnc.com:100
Mutex
L6842LOEA522C3
Attributes
-
enable_keylogger
true
-
enable_message_box
false
-
ftp_directory
./logs/
-
ftp_interval
30
-
injected_process
svchost.exe
-
install_dir
install
-
install_file
svchost.exe
-
install_flag
true
-
keylogger_enable_ftp
false
-
password
15121983
Signatures
-
Cybergate family
Files
-
de46eba083a79ba0ec9bb7cb2bad74ab1cb7a0afbca5a0e4c737aedf0e606960
Headers
Sections