Overview

overview

10

Static

static

10

ad9089c797...03.exe

windows7-x64

10

ad9089c797...03.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ad9089c797500697d19789118ea97c453be72fb69cca10c8b343bdc92cff9503

  • Size

    346KB

  • MD5

    9df369d1cc523b6e703453f2cda21ec2

  • SHA1

    713ef731aa97d590852d38bbd775626f1c2fddf0

  • SHA256

    ad9089c797500697d19789118ea97c453be72fb69cca10c8b343bdc92cff9503

  • SHA512

    e2eb68038abd2f97274478e8a0b4046a761f3ab1c4b13ead24472879d8f1c8c6bc760caf1cd37f9f71055d265770e00fc0b1261eb5a1b2a32206c7ef3b42e2b3

  • SSDEEP

    6144:lmcD66RRjsZwzZw45JGmrpQsK3RD2u270jupCJsCxCV:AcD663s08Z2zkPaCxk

Score
10/10
öííécybergate

Malware Config

Extracted

Family

cybergate

Version

2.6

Botnet

ÖÍíÉ

C2

jjo.no-ip.biz:288

Mutex

***MUTEX***

Attributes
  • enable_keylogger

    true

  • enable_message_box

    false

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    svchost.exe

  • install_file

    Win_Xp.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    Please try again later.

  • message_box_title

    Error

  • password

    abcd1234

  • regkey_hkcu

    HKCU

  • regkey_hklm

    HKLM

Signatures

Files

  • ad9089c797500697d19789118ea97c453be72fb69cca10c8b343bdc92cff9503
    .exe windows x86


    Headers

    Sections