General
-
Target
0204bbad56c731b7cd317be63ea00cfcd847b1bf5ef3f169d369fb0ac5e449aa
-
Size
427KB
-
MD5
21d5f477d1ccf3e24348472110f2758f
-
SHA1
66fc49dcc5e0f81b14c460f1f3a53f54e1144361
-
SHA256
0204bbad56c731b7cd317be63ea00cfcd847b1bf5ef3f169d369fb0ac5e449aa
-
SHA512
e0614c22bdfa818c6ce9099054a1d94bb04048a38bccfb30f7cfe29f38e424275821b46ed11a2f72b523685e8cfac9c8c77dea19d69be4b524770694a1ee17be
-
SSDEEP
12288:tuMw0Bi8vvrHxVPKyG2m77sZB07FxObO32a:tHw18vrxA2t07FQaL
Score
10/10
Malware Config
Extracted
Family
cybergate
Version
v3.4.2.2
Botnet
remote
C2
hackersyr.ddns.net:1177
Mutex
148C7G427PK688
Attributes
-
enable_keylogger
true
-
enable_message_box
true
-
ftp_directory
./logs
-
ftp_interval
30
-
injected_process
explorer.exe
-
install_dir
install
-
install_file
csrss.exe
-
install_flag
true
-
keylogger_enable_ftp
false
-
message_box_caption
error 401!
-
message_box_title
Error
-
password
cybergate
Signatures
-
Cybergate family
Files
-
0204bbad56c731b7cd317be63ea00cfcd847b1bf5ef3f169d369fb0ac5e449aa
Headers
Sections