Overview

overview

10

Static

static

10

89344532f3...92.exe

windows7-x64

10

89344532f3...92.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    89344532f3fdc62c7f50563e06fa159f6bac12df0b65a5383ffa550f6c3b4e92

  • Size

    290KB

  • MD5

    19ab6f6ce67c94de43399abfdf02f19e

  • SHA1

    a44429036cf01f4fa0d62003d8ad0c67679929e2

  • SHA256

    89344532f3fdc62c7f50563e06fa159f6bac12df0b65a5383ffa550f6c3b4e92

  • SHA512

    ab2a72ee773f41c11c96aaf88ace95d2ca46f42fba3fa9b4cc55db7c332b5d6ea8e0d64a2194803203ae7930f2978155a42fbb10262a6fb1c4a332dae5616fb3

  • SSDEEP

    6144:QmcD66RRjM5JGmrpQsK3RD2u270jupCJsCxCM:ZcD663JZ2zkPaCxx

Score
10/10
vítimanovocybergate

Malware Config

Extracted

Family

cybergate

Version

2.6

Botnet

vítimanovo

C2

dondns.no-ip.org:1338

dondns.no-ip.org:81

dondns.no-ip.org:82

dondns.no-ip.org:2000

dondns.no-ip.org:15963
Mutex

**ByLasting**

Attributes
  • enable_keylogger

    true

  • enable_message_box

    true

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • ftp_password

    ªš÷Öº+Þ

  • ftp_port

    21

  • ftp_server

    ftp.server.com

  • ftp_username

    ftp_user

  • injected_process

    explorer.exe

  • install_dir

    install

  • install_file

    Win.exe

  • install_flag

    true

  • keylogger_enable_ftp

    true

  • message_box_caption

    Incompativel Com seu Sistem!!!

  • message_box_title

    Error

  • password

    12345

  • regkey_hkcu

    HKCU

  • regkey_hklm

    HKLM

Signatures

Files

  • 89344532f3fdc62c7f50563e06fa159f6bac12df0b65a5383ffa550f6c3b4e92
    .exe windows x86


    Headers

    Sections