Extracted

• • Target

    951776feaa70db9f766e18713fa27a3741545ebe9937787f3beaf0afb42bb73a

  • Size

    1.2MB

  • MD5

    5c72537e5f769e555facf09cb8a93bc0

  • SHA1

    211ca302f62d24edd03c4aca9591002ec7f4046a

  • SHA256

    951776feaa70db9f766e18713fa27a3741545ebe9937787f3beaf0afb42bb73a

  • SHA512

    b8b8b236523fcdf76b4414638ba3f9d64df599a06d5f3e99bc436ce0e941faabb07f367e8ad04a1e3ccf601b42ff4d1c819569d1304c67a632c8200727258ed1

  • SSDEEP

    24576:HAzxC8UdlA80Z74qDL5POzA6AzL1aeqL2NHr0:gIxlzpqDLBDLL1V9Y

  Score

  10^/10

  cybergatevítimadiscoverypersistencestealertrojanupx

  • CyberGate, Rebhip

    CyberGate is a lightweight remote administration tool with a wide array of functionalities.

    trojanstealercybergate

  • Adds policy Run key to start application

    persistence

  • Executes dropped EXE

  • Modifies Installed Components in the registry

    persistence

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Loads dropped DLL

  • Adds Run key to start application

    persistence

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2