Overview

overview

10

Static

static

10

1edee40368...9c.exe

windows7-x64

10

1edee40368...9c.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1edee4036874d31f78678b32b8f43c2870028e15a165db331b1a1bbd8763779c

  • Size

    293KB

  • MD5

    ea1b7f0a25211b65746927fa2b692384

  • SHA1

    8d0cba1a2388bc37c04b8197d317709b7a4d4172

  • SHA256

    1edee4036874d31f78678b32b8f43c2870028e15a165db331b1a1bbd8763779c

  • SHA512

    16f0e3cc5e0d9ce66526eee9fa1fc0bfa309f444fc8a2c5d94fc7b1e791626bd03ceff1b1c42db86b9787e387a1ec3a2dd05bde49ed26f989d2806120cd8a054

  • SSDEEP

    6144:jmcD66RRjo5JGmrpQsK3FD2u270jupCJsCxC:acD663V92zkPaCx

Score
10/10
vítimacybergate

Malware Config

Extracted

Family

cybergate

Version

2.6

Botnet

Vítima

C2

etakstata.no-ip.org:2213

Mutex

***MUTEX***

Attributes
  • enable_keylogger

    true

  • enable_message_box

    true

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    explorer.exe

  • install_dir

    Microsoft

  • install_file

    explorer.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    Arquivo não encontrado (dssl.exe)

  • message_box_title

    Erro

  • password

    123

  • regkey_hkcu

    HKCU

  • regkey_hklm

    HKLM

Signatures

Files

  • 1edee4036874d31f78678b32b8f43c2870028e15a165db331b1a1bbd8763779c
    .exe windows x86


    Headers

    Sections