General
-
Target
aae01e5c361f27e5fb8be7340671ce6e3340a99fee1e3107e208326d64ea4d86
-
Size
296KB
-
MD5
caccf85003ff699ac8d37e3f58b03f8a
-
SHA1
2fc1bb52839d5f9eb36694248548f3f14a4dc5d1
-
SHA256
aae01e5c361f27e5fb8be7340671ce6e3340a99fee1e3107e208326d64ea4d86
-
SHA512
4dad8b5fe96b0f4f28d4a1aa7df1526d3442e7b36389b7a0d20fcd7705e4e9d001b8c33e828b51dc0b846b7622c7af62cd55258123358a5f13053b15dc526d11
-
SSDEEP
6144:fOpslFlqIhdBCkWYxuukP1pjSKSNVkq/MVJb3:fwslfTBd47GLRMTb3
Score
10/10
Malware Config
Extracted
Family
cybergate
Version
v1.07.5
Botnet
remote
C2
sa123.zapto.org:82
Mutex
LMDL56L7E1131W
Attributes
-
enable_keylogger
true
-
enable_message_box
false
-
ftp_directory
./logs/
-
ftp_interval
30
-
injected_process
explorer.exe
-
install_dir
install
-
install_file
server.exe
-
install_flag
true
-
keylogger_enable_ftp
false
-
message_box_caption
Remote Administration anywhere in the world.
-
message_box_title
CyberGate
-
password
nananana
Signatures
-
Cybergate family
Files
-
aae01e5c361f27e5fb8be7340671ce6e3340a99fee1e3107e208326d64ea4d86
Headers
Sections