Overview

overview

10

Static

static

10

101e02fae4...0b.exe

windows7-x64

10

101e02fae4...0b.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    101e02fae49d4086ad80cb68c4d0492261429edea01d8005e3769c3a1e663d0b

  • Size

    290KB

  • MD5

    0327889ec8b208e29bb6eb943b171dc0

  • SHA1

    5481e167c0e3cd24cfc1de45cfbf40bfc0a8418a

  • SHA256

    101e02fae49d4086ad80cb68c4d0492261429edea01d8005e3769c3a1e663d0b

  • SHA512

    7c80d96a3ac1173cf78bf2333405e87963bf755c50210664ebfb3bdc109f20d0db594089c4695ce8cc85fedefc7b8368e797503b868d85a33aae5a898542d625

  • SSDEEP

    6144:ImcD66RRjw5JGmrpQsK3RD2u270jupCJsCxCE:BcD663NZ2zkPaCxp

Score
10/10
öííécybergate

Malware Config

Extracted

Family

cybergate

Version

2.6

Botnet

ÖÍíÉ

C2

zatoor.zapto.org:288

Mutex

***MUTEX***

Attributes
  • enable_keylogger

    true

  • enable_message_box

    false

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    svchost.exe

  • install_dir

    micro

  • install_file

    windows.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    texto da mensagem

  • message_box_title

    t?tulo da mensagem

  • password

    abcd1234

Signatures

Files

  • 101e02fae49d4086ad80cb68c4d0492261429edea01d8005e3769c3a1e663d0b
    .exe windows x86


    Headers

    Sections