General
-
Target
7c1302a2b4bd72643f652505ab2981cf8c0d70450d1e2c4e17ebdfeee0975f83
-
Size
281KB
-
MD5
906ba2a8ba79adef5f0a55a3b842f433
-
SHA1
460a17d9969bfe1debebe6eecc90845b5d0304a1
-
SHA256
7c1302a2b4bd72643f652505ab2981cf8c0d70450d1e2c4e17ebdfeee0975f83
-
SHA512
8193244d20f58ef269e8c5ab6dd6d0bf52974a985f7eba6babba09ccfbde021a3355aa753d0e52853d70326940d76574b21d83398b764ba21463d01ab14b2f1a
-
SSDEEP
6144:AScrL74mp8D6WGc/YSlIipBReubLzeh7Yy0DMIdeXijV:Rcsy78QSVnNyhsFMCeSjV
Score
10/10
Malware Config
Extracted
Family
cybergate
Version
v1.18.0 - Crack Version
Botnet
ww-MM
C2
dfuso.zapto.org:777
Mutex
J4051HU5NL8V88
Attributes
-
enable_keylogger
true
-
enable_message_box
false
-
ftp_directory
./logs
-
ftp_interval
30
-
injected_process
explorer.exe
-
install_dir
install
-
install_file
server.exe
-
install_flag
true
-
keylogger_enable_ftp
false
-
message_box_caption
Remote Administration anywhere in the world.
-
message_box_title
CyberGate
-
password
123456
Signatures
-
Cybergate family
Files
-
7c1302a2b4bd72643f652505ab2981cf8c0d70450d1e2c4e17ebdfeee0975f83
Headers
Sections