Overview

overview

10

Static

static

10

c31a23f116...36.exe

windows7-x64

10

c31a23f116...36.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c31a23f116adc38fae1cc6bb149af9593e8d63620cb1d56d92bcb5d27df29036

  • Size

    1.0MB

  • MD5

    44fb3281dde5dde008163b68d99e7014

  • SHA1

    80ea1bd71007b30b1dbddf72067ecbca441f4c92

  • SHA256

    c31a23f116adc38fae1cc6bb149af9593e8d63620cb1d56d92bcb5d27df29036

  • SHA512

    8cf8fdf487a47d74b32cc5cc55cb5528824f46ca99c79869f211acb1df6ad8a6fddba01cf4fab9a86d9cae7f2a43244a842157f08a13d9f959dc179320f27709

  • SSDEEP

    12288:rjkM00blM00b6qweAtpVxag1bvgx6NdC62kVM:rjkM00blM00bdWN1bY02X

Score
10/10
cybercybergate

Malware Config

Extracted

Family

cybergate

Version

v1.03.0

Botnet

cyber

C2

anonymous.no-ip.info:100

Mutex

0IW6Q3L54HRBM4

Attributes
  • enable_keylogger

    true

  • enable_message_box

    false

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    csrss.exe

  • install_dir

    install

  • install_file

    server.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    Remote Administration anywhere in the world.

  • message_box_title

    CyberGate

  • password

    123456

  • regkey_hkcu

    HKCU

  • regkey_hklm

    HKLM

Signatures

Files

  • c31a23f116adc38fae1cc6bb149af9593e8d63620cb1d56d92bcb5d27df29036
    .exe windows x86


    Headers

    Sections