General

  • Target

    5dcfdfb879f35f55c6f05e9b5ccd0dc2caccc4aeca3b11b219187901ea95449a

  • Size

    281KB

  • MD5

    9eb62c7643f4d085905112e3c9833819

  • SHA1

    4db616b42853cbad29e9aee670615e3656e872d5

  • SHA256

    5dcfdfb879f35f55c6f05e9b5ccd0dc2caccc4aeca3b11b219187901ea95449a

  • SHA512

    995f2fe395ffc6a0f806e058336de39a942e8d012e6ca43b9ad52627ff22ace8b4c4ceb1b51b65671f23c3646b92c223b3b271ebddc8603a1e4d3d0e99646f1e

  • SSDEEP

    6144:AScrLB4mp8D6WGc/YSlIipBReubLzeh7Yy0DMIdeXijU:Rcmy78QSVnNyhsFMCeSjU

Score
10/10

Malware Config

Extracted

Family

cybergate

Version

v1.18.0 - Trial version

Botnet

Cyber

C2

jezer666.zapto.org:80

Mutex

1DGL34P62YO52V

Attributes
  • enable_keylogger

    true

  • enable_message_box

    true

  • ftp_directory

    ./logs

  • ftp_interval

    30

  • injected_process

    explorer.exe

  • install_dir

    install

  • install_file

    server.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    Username : Psyche Passeword : wood22

  • message_box_title

    Compte

  • password

    cybergate

  • regkey_hkcu

    HKCU

  • regkey_hklm

    HKLM

Signatures

Files

  • 5dcfdfb879f35f55c6f05e9b5ccd0dc2caccc4aeca3b11b219187901ea95449a
    .exe windows x86


    Headers

    Sections