Overview

overview

10

Static

static

10

f89fc48a66...35.exe

windows7-x64

f89fc48a66...35.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    f89fc48a66a8c3d53324fe8f4c3b61ccf83957013b948175216430e3fe8a8935

  • Size

    188KB

  • MD5

    c651b564b45cea5b57ada947fad0dff3

  • SHA1

    64308f22ca99720256e9669953ecf56bc1a595ae

  • SHA256

    f89fc48a66a8c3d53324fe8f4c3b61ccf83957013b948175216430e3fe8a8935

  • SHA512

    090f8460adcac3178c452043326720af6f6594d91e92a3e85688db112e704c74fb21e2bc57cdc1263996fda7ae3789db42bf0c0dcb049e022695107c4bafcd4e

  • SSDEEP

    3072:2iGpszXcD66XBRjKP5JuXLFG3Oa95BrKUqEQ94jhc3PQuPe+D2ue37:KmcD66RRjo5JGmrpQsK3FD2u27

Score
10/10
vítimacybergate

Malware Config

Extracted

Family

cybergate

Version

2.6

Botnet

vítima

C2

funkrio.zapto.org:81

Mutex

***MUTEX***

Attributes
  • enable_keylogger

    true

  • enable_message_box

    true

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    explorer.exe

  • install_dir

    install

  • install_file

    server.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    DE OK CARA CONTINUAR.!

  • message_box_title

    informações

  • password

    12345

  • regkey_hkcu

    win32

  • regkey_hklm

    win32

Signatures

Files

  • f89fc48a66a8c3d53324fe8f4c3b61ccf83957013b948175216430e3fe8a8935
    .exe windows x86


    Headers

    Sections