Overview

overview

10

Static

static

10

6937f3567a...7a.exe

windows7-x64

3

6937f3567a...7a.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    6937f3567a8d3b5245cf2fc74d98336e019b562bdcd66d058bafccc323ec357a

  • Size

    301KB

  • MD5

    095aed31ae0a72056d5c6bff1bd7b0cf

  • SHA1

    0634be90aec91fd37193e3c1871800deedaa6f39

  • SHA256

    6937f3567a8d3b5245cf2fc74d98336e019b562bdcd66d058bafccc323ec357a

  • SHA512

    8f356d2e64d3fd74a6c75e9a4d90c37f71af896be4a243225cf0ecf6d3d50818a8adb8da17d2c37e754fa6a3944237c5f2a44d3d6307a1e9e746c3e09f42e955

  • SSDEEP

    6144:NmcD66RRj25JGmrpQsK3RD2u270jupCJsCxCg:YcD663PZ2zkPaCxh

Score
10/10
öííécybergate

Malware Config

Extracted

Family

cybergate

Version

2.6

Botnet

ÖÍíÉ

C2

127.0.0.1:288

Mutex

***MUTEX***

Attributes
  • enable_keylogger

    true

  • enable_message_box

    false

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    svchost.exe

  • install_file

    windows.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    texto da mensagem

  • message_box_title

    t?tulo da mensagem

  • password

    abcd1234

Signatures

Files

  • 6937f3567a8d3b5245cf2fc74d98336e019b562bdcd66d058bafccc323ec357a
    .exe windows x86


    Headers

    Sections