General

  • Target

    e563bd1dac756f2be74607493d86ce3ee57ba682ce5b239afdbfe5c8e6f28ae6

  • Size

    630KB

  • MD5

    b11fdfec6ddbd2c0c092aba2c34f2561

  • SHA1

    de260faae19626009c8b53d3315088933465f8ac

  • SHA256

    e563bd1dac756f2be74607493d86ce3ee57ba682ce5b239afdbfe5c8e6f28ae6

  • SHA512

    232e4ca08ede21f601b207a0fb46f53d1a6cef8aa6a577341416f2113606a7aae74854368802c26f4ddaa3c4787d92a41c425b34a2710c45d25671de389852dc

  • SSDEEP

    12288:D/ZfhJd98qplMlVsIxM2psjdve3O0yqBq9iSADGNBe5Bj:D/ZLpOEe3S4ZDGNo3j

Score
10/10

Malware Config

Extracted

Family

cerberus

C2

https://twelveelevensoup.at

twelveelevensoup.at:8000

Attributes
  • uri

    /gate.php?action=botcheck&data=

    /gate.php?action=checkAP&data=

    /gate.php?action=getModule&data=

    /gate.php?action=getinj&data=

    /gate.php?action=injcheck&data=

    /gate.php?action=registration&data=

    /gate.php?action=sendInjectLogs&data=

    /gate.php?action=sendKeylogger&data=

    /gate.php?action=sendSmsLogs&data=

    /gate.php?action=timeInject&data=

Signatures

Files

  • e563bd1dac756f2be74607493d86ce3ee57ba682ce5b239afdbfe5c8e6f28ae6
    .dex