General
-
Target
766d8192185bcd2b25f7bda8835db7053b2d1971b69b1e5ae3b0b6c4def9f7d3
-
Size
428KB
-
MD5
2113219c22a82d3ce12462235559aa30
-
SHA1
c085831f468d0ac225af134bc6fdb41ef4afdfdc
-
SHA256
766d8192185bcd2b25f7bda8835db7053b2d1971b69b1e5ae3b0b6c4def9f7d3
-
SHA512
8d411cf1a9db5fe6bc9ad31c27c1cf8d07859f6bdeec28f6d28e48844365362ce06417ad462b884afb1b7051b7823671a629fd8e9d7b5e2687023c16ccf82f3f
-
SSDEEP
12288:RuMwlBi8vvrHxVPKyv2m77sZB07FxObO32E:RHwy8vrx52t07FQaT
Score
10/10
Malware Config
Extracted
Family
cybergate
Version
v3.4.2.2
Botnet
remote
C2
172.16.7.31:81
Mutex
4H4RP58QY0HFN2
Attributes
-
enable_keylogger
true
-
enable_message_box
false
-
ftp_directory
./logs
-
ftp_interval
30
-
injected_process
explorer.exe
-
install_dir
install
-
install_file
server.exe
-
install_flag
true
-
keylogger_enable_ftp
false
-
message_box_caption
Remote Administration anywhere in the world.
-
message_box_title
CyberGate
-
password
cybergate
Signatures
-
Cybergate family
Files
-
766d8192185bcd2b25f7bda8835db7053b2d1971b69b1e5ae3b0b6c4def9f7d3
Headers
Sections