Overview

overview

10

Static

static

10

41738266b3...9f.exe

windows7-x64

10

41738266b3...9f.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    41738266b360d223489aebd59b07dc70a100ee49c5f6f8b528759cac9050d89f

  • Size

    282KB

  • MD5

    96dc0c501c0d35a0d4e012ca3ba669cb

  • SHA1

    fa73d8ad64fe678438c3df363af44c434e6acea2

  • SHA256

    41738266b360d223489aebd59b07dc70a100ee49c5f6f8b528759cac9050d89f

  • SHA512

    b60848c919464f4357a3d4fc40f6590bab4d55c9401d3887b4af6b2ab3349765eb74df02d8072a5f121cdaac319ecfbf2c92352990bc2a9259e325a862b34250

  • SSDEEP

    6144:VxJsGLn49oxDNT/xQphU+jrlgzfuzt91C9NDyWId98HhqbxtHGZB:HJsGs94h/xQp6+tqOYy9zo0g

Score
10/10
11/07/2013cybergate

Malware Config

Extracted

Family

cybergate

Version

v1.02.1

Botnet

11/07/2013

C2

sorft.myvnc.com:1338

Mutex

Pluguin

Attributes
  • enable_keylogger

    true

  • enable_message_box

    false

  • ftp_directory

    ./

  • ftp_interval

    30

  • injected_process

    explorer.exe

  • install_dir

    Microsoft

  • install_file

    Update.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    VOCÊ FOI HACKEADO ...SEU SISTEMA SERÁ FORMATADO.

  • message_box_title

    LAMMER

  • password

    invasor

  • regkey_hkcu

    Avirnt

  • regkey_hklm

    Avgnt

Signatures

Files

  • 41738266b360d223489aebd59b07dc70a100ee49c5f6f8b528759cac9050d89f
    .exe windows x86


    Headers

    Sections