Overview

overview

10

Static

static

10

d1cc4b1608...77.exe

windows7-x64

8

d1cc4b1608...77.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    d1cc4b1608297d49c497abe0deba96c972f434b8726d806c32e2bfd4cc4c6977

  • Size

    296KB

  • MD5

    41da2c67f7eddd37d58d0d891cef11d1

  • SHA1

    595987a67b9e7915f1189a2b2ebfa6a3c6743485

  • SHA256

    d1cc4b1608297d49c497abe0deba96c972f434b8726d806c32e2bfd4cc4c6977

  • SHA512

    1e58595bf9deee232342866cdf6cf047fb0a979af7c8d2e17937f12c4281cdfe132ae46d329d96e9ab1619d77b3e750cc78c0012c872b4094c4870fd73a9fbfa

  • SSDEEP

    6144:POpslFlqKhdBCkWYxuukP1pjSKSNVkq/MVJbf:PwslvTBd47GLRMTbf

Score
10/10
cybercybergate

Malware Config

Extracted

Family

cybergate

Version

v1.07.5

Botnet

Cyber

C2

127.0.0.1:1686

remote10.no-ip.biz:1686
Mutex

1LVAV6R8VL843R

Attributes
  • enable_keylogger

    true

  • enable_message_box

    false

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    explorer.exe

  • install_dir

    drivers

  • install_file

    syshost.exe

  • install_flag

    false

  • keylogger_enable_ftp

    false

  • message_box_caption

    Remote Administration anywhere in the world.

  • message_box_title

    CyberGate

  • password

    0123456789

Signatures

Files

  • d1cc4b1608297d49c497abe0deba96c972f434b8726d806c32e2bfd4cc4c6977
    .exe windows x86


    Headers

    Sections