Overview

overview

10

Static

static

10

942b06d1fc...75.exe

windows7-x64

10

942b06d1fc...75.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    942b06d1fc51dee67f9abeafa2d127c34a7c57d46a813f54aab9761b4d961675

  • Size

    273KB

  • MD5

    4d69f72729356e8ea86a514cb2724218

  • SHA1

    76d99c834c68e454e20c37040922fc6253b493ce

  • SHA256

    942b06d1fc51dee67f9abeafa2d127c34a7c57d46a813f54aab9761b4d961675

  • SHA512

    f896ce6833b93639e7cad5d6eccadb0088b054c09d20f0227009391fc029019fdec216107a2e350878bb1e5ab81605068a24c4b2ed175afceb19ca133ccf1d0c

  • SSDEEP

    6144:v3LZTsxZZQttyCVxaWYSdMU/77hlruc6XmDoTbcI7CPPdf:PpeAtpVxagMU/plruchDofAPZ

Score
10/10
lockerzcybergate

Malware Config

Extracted

Family

cybergate

Version

v1.02.0

Botnet

Lockerz

C2

cybereydam.no-ip.org:82

Mutex

6J1GV764PK5GYC

Attributes
  • enable_keylogger

    true

  • enable_message_box

    false

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    explorer.exe

  • install_dir

    Winbooterr

  • install_file

    Svchost.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    Remote Administration anywhere in the world.

  • message_box_title

    CyberGate

  • password

    123456

  • regkey_hkcu

    HKCU

  • regkey_hklm

    HKLM

Signatures

Files

  • 942b06d1fc51dee67f9abeafa2d127c34a7c57d46a813f54aab9761b4d961675
    .exe windows x86


    Headers

    Sections