Overview

overview

10

Static

static

10

bcaf30b58b...e7.exe

windows7-x64

8

bcaf30b58b...e7.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    bcaf30b58b6c9001ee443002a7a315a97ae19bbe368b3701b3b7af6169c13ee7

  • Size

    289KB

  • MD5

    5af1654bda6d0efa77ad460da2a5d914

  • SHA1

    9f0d18bd5967d615d04ca851ac2ced64bcb6ba8a

  • SHA256

    bcaf30b58b6c9001ee443002a7a315a97ae19bbe368b3701b3b7af6169c13ee7

  • SHA512

    5819e8903e3ff742f64a58c7e4d205b98ef633c662e499014a5983725047e950bd78673091fccca829c674e13733485be4a084eabc15c6134cf5e3db53b32958

  • SSDEEP

    6144:mOpslFlq+hdBCkWYxuukP1pjSKSNVkq/MVJbd:mwslNTBd47GLRMTbd

Score
10/10
remotecybergate

Malware Config

Extracted

Family

cybergate

Version

v1.07.5

Botnet

remote

C2

yairdolev.no-ip.biz:1604

Mutex

Y30K3D5311JKCM

Attributes
  • enable_keylogger

    true

  • enable_message_box

    false

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    explorer.exe

  • install_dir

    install

  • install_file

    server.exe

  • install_flag

    false

  • keylogger_enable_ftp

    false

  • message_box_caption

    Remote Administration anywhere in the world.

  • message_box_title

    CyberGate

  • password

    123

Signatures

Files

  • bcaf30b58b6c9001ee443002a7a315a97ae19bbe368b3701b3b7af6169c13ee7
    .exe windows x86


    Headers

    Sections