General
-
Target
659be59f5ef98a5cb52e104a5742eb24da6befa7a864991b50604fc5868a3451
-
Size
277KB
-
MD5
7b5eabecdaaa88d77885fff341299d30
-
SHA1
87a73cc644391cca8476a0b5bff3721808369607
-
SHA256
659be59f5ef98a5cb52e104a5742eb24da6befa7a864991b50604fc5868a3451
-
SHA512
b92509146ed24da32530a029e9ddb3a3b94169e726915d3d63a49954aaad772f795d2a402eda4b255e0586aa11afc3b8a15690cf9a438c842fa3c93ac2e444bf
-
SSDEEP
6144:/yuMwiLdfk2m7mrUsqWBn837FNldObO3k1jP:quMw12m77sZB07FxObO32b
Score
10/10
Malware Config
Extracted
Family
cybergate
Version
v3.4.2.2
Botnet
remote
C2
6.no-ip.org:999
Mutex
0G8D2ICLM6NK72
Attributes
-
enable_keylogger
true
-
enable_message_box
false
-
ftp_directory
./logs
-
ftp_interval
30
-
injected_process
explorer.exe
-
install_dir
Player
-
install_file
Player.exe
-
install_flag
true
-
keylogger_enable_ftp
false
-
message_box_caption
Remote Administration anywhere in the world.
-
message_box_title
CyberGate
-
password
123456
-
regkey_hkcu
Player
-
regkey_hklm
Player
Signatures
-
Cybergate family
Files
-
659be59f5ef98a5cb52e104a5742eb24da6befa7a864991b50604fc5868a3451
Headers
Sections