General
-
Target
ce8869baa32f71f4ac987426eca9fbda6d4639a52ae96b5b0aae363900e80ba8
-
Size
324KB
-
MD5
28d360a1220aba3fb2759e2aaf882b20
-
SHA1
afdece1315c2014344173710114b9cfe2dfe9687
-
SHA256
ce8869baa32f71f4ac987426eca9fbda6d4639a52ae96b5b0aae363900e80ba8
-
SHA512
eec82261ff5ac76204c5f3fa7fe0f4470be9b0a961a46adca059e44a6d7aeb8ca97f7632537c4789494c7f903f8b55f8b8a06af61eeff92841aa0494b34d90ad
-
SSDEEP
6144:4ScrLX4mp8D6WGc/YSlIipBReubLzeh7Yy0DMIdeXij:Jcgy78QSVnNyhsFMCeSj
Score
10/10
Malware Config
Extracted
Family
cybergate
Version
v1.18.0 - Crack Version
Botnet
remote
C2
sey69.no-ip.biz:82
Mutex
5U71V885Y00AVR
Attributes
-
enable_keylogger
true
-
enable_message_box
false
-
ftp_directory
./logs
-
ftp_interval
30
-
injected_process
ddfrffff.exe
-
install_dir
edrtffgg
-
install_file
ddfrffff.exe
-
install_flag
true
-
keylogger_enable_ftp
false
-
message_box_caption
Remote Administration anywhere in the world.
-
message_box_title
CyberGate
-
password
123456
-
regkey_hkcu
sewerfHKCU
Signatures
-
Cybergate family
Files
-
ce8869baa32f71f4ac987426eca9fbda6d4639a52ae96b5b0aae363900e80ba8
Headers
Sections