Overview

overview

10

Static

static

10

NEAS.1f8e7...JC.exe

windows7-x64

10

NEAS.1f8e7...JC.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.1f8e7fd811d927e4849b217edc73c460_JC.exe

  • Size

    301KB

  • MD5

    1f8e7fd811d927e4849b217edc73c460

  • SHA1

    c7769f7f4c60ffbe197a559bbb66877a6f353a16

  • SHA256

    2417dbf107596f015cab49c919691f05ddc15632802f5ad54c74daa325905f13

  • SHA512

    37648cdd2a1d197d4f772e4446e5fa0cd9937165fae5705f04e004d63c23df5992e928f1b7e0327eb816999c36557a523a43b6801889ddacda035d53e7230016

  • SSDEEP

    6144:smcD66RRjc5JGmrpQsK3RD2u270jupCJsCxCs:dcD6635Z2zkPaCxj

Score
10/10
öííécybergate

Malware Config

Extracted

Family

cybergate

Version

2.6

Botnet

ÖÍíÉ

C2

sana8721201234.zapto.org:288

Mutex

***MUTEX***

Attributes
  • enable_keylogger

    true

  • enable_message_box

    false

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    svchost.exe

  • install_file

    windows.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    texto da mensagem

  • message_box_title

    t?tulo da mensagem

  • password

    abcd1234

  • regkey_hkcu

    HKCU

  • regkey_hklm

    HKLM

Signatures

  • Cybergate family
    cybergate
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.1f8e7fd811d927e4849b217edc73c460_JC.exe
    .exe windows:4 windows x86


    Headers

    Sections