Overview

overview

10

Static

static

10

61b55173c1...f3.exe

windows7-x64

10

61b55173c1...f3.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    61b55173c1401e02b023d0464070edffd2d6caac837d592648df65d8c014b6f3

  • Size

    649KB

  • MD5

    ca26e204c56c2c16bc314a05573f51aa

  • SHA1

    7293ec9366c6cbb3afa5bf5f6c6b39b02b679c9c

  • SHA256

    61b55173c1401e02b023d0464070edffd2d6caac837d592648df65d8c014b6f3

  • SHA512

    5d0d93f3f5c4c773abcb1a3a3a079ae6c816c2b8aff4f83370f5f1e9def05672dd3eadddb93b1415f4d0e8af9c0a58a163f807427343fc3c156a22f0e4a85045

  • SSDEEP

    12288:6cD6638Q4dLOSwCDfJqlE6uGiGSAlVLuBRzXA2oAMHVB66EYAUTS9D/ksSzQRa:6bLtwCc26uGi2VCHXSBzTaDMsAQRa

Score
10/10
vítimacybergate

Malware Config

Extracted

Family

cybergate

Version

2.7 Final

Botnet

vítima

C2

hackiir.no-ip.biz:81

Mutex

***MUTEX***

Attributes
  • enable_keylogger

    true

  • enable_message_box

    false

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    explorer.exe

  • install_dir

    install

  • install_file

    server.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    texto da mensagem

  • message_box_title

    título da mensagem

  • password

    abcd1234

  • regkey_hkcu

    HKCU

  • regkey_hklm

    HKLM

Signatures

Files

  • 61b55173c1401e02b023d0464070edffd2d6caac837d592648df65d8c014b6f3
    .exe windows x86


    Headers

    Sections