cybergate | 925ca816ee91f7ed13dabfbbb89beb7aaf94dc229b3253d7e03c0f8ea8ac6ca9

General

Target

925ca816ee91f7ed13dabfbbb89beb7aaf94dc229b3253d7e03c0f8ea8ac6ca9
Size

281KB
MD5

498f63468ceb4c15b444dc01f3298288
SHA1

293dfa180a926402234ae194379a963e4968c6ac
SHA256

925ca816ee91f7ed13dabfbbb89beb7aaf94dc229b3253d7e03c0f8ea8ac6ca9
SHA512

ee6338160437683a91b81b57fc8533414c54b3199359ddb7f5b8b48e6f518991ecd45cb2fcc5282c9d21d06880062e1008fe1d68f5120d3e5b39cbffa7a52047
SSDEEP

6144:VS5p9UikLRA5kDXG83XBDvfkt3bbTUgK01CfERod0O9x:A3OScG8HBMbTUIlR0x

Score

10^/10

remote cybergate

Family

cybergate

Version

v1.20.10

Botnet

remote

C2

asushack9424.no-ip.org:83

Mutex

6U58OW8U1L0WE2

Attributes

enable_keylogger
true
enable_message_box
true
ftp_directory
./logs
ftp_interval
30
injected_process
explorer.exe
install_dir
Microsoft
install_file
Microupdate.exe
install_flag
true
keylogger_enable_ftp
false
message_box_caption
Error 5212a34 Please contact your local Administrator to acess this file
message_box_title
Microsoft/win32
password
lolada
regkey_hkcu
MICROSOFT
regkey_hklm
MICROSOFT