Overview

overview

10

Static

static

10

110670f7e9...a7.exe

windows7-x64

10

110670f7e9...a7.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    110670f7e9cf9f288035809c686121a32b208b840cc15db6854db3428a71cda7

  • Size

    289KB

  • MD5

    8fe8d00cbfbbec880479e1a54a7a577c

  • SHA1

    f4a1f8fd2153c13cc8df842d81c56d14f63bdaf0

  • SHA256

    110670f7e9cf9f288035809c686121a32b208b840cc15db6854db3428a71cda7

  • SHA512

    4b484d7df5921b4f3c8ec541a7c106560723a4fd1365c75d676f8ba328e11c63eb53afae8df0fa1ca55b33556408ec1d6b83bae1fb35581bfe31cf0c8a6aa8e7

  • SSDEEP

    6144:+OpslFlqvhdBCkWYxuukP1pjSKSNVkq/MVJbE:+wsliTBd47GLRMTbE

Score
10/10
ak cryptcybergate

Malware Config

Extracted

Family

cybergate

Version

v1.07.5

Botnet

ak crypt

C2

oluwalogbon1100.ddns.net:8181

Mutex

35QY3D13E7275D

Attributes
  • enable_keylogger

    true

  • enable_message_box

    false

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    explorer.exe

  • install_dir

    install

  • install_file

    server.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    Remote Administration anywhere in the world.

  • message_box_title

    CyberGate

  • password

    12345

Signatures

Files

  • 110670f7e9cf9f288035809c686121a32b208b840cc15db6854db3428a71cda7
    .exe windows x86


    Headers

    Sections