Overview

overview

10

Static

static

10

NEAS.730ac...c0.exe

windows7-x64

10

NEAS.730ac...c0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.730ac542976dcc429864c5f08ce31ec0.exe

  • Size

    283KB

  • MD5

    730ac542976dcc429864c5f08ce31ec0

  • SHA1

    610c7cd3469a0295407729eb56b822181dd1b855

  • SHA256

    20dbbb26c2a9155d3902142191dd5e2d9c5ff526d37063c7a21b4b8c0a62cee2

  • SHA512

    94a8ce186cf2f98db49a2e75ec6e86f98e25005ff6e039fbaebfbbdcf4230c6ad011867110905e22229068d880c4085dbd66abaebb624fac640c7d07d90112c3

  • SSDEEP

    6144:jmcD66RRjm5JGmrpQsK3RD2u270jupCJsCxCg:acD663fZ2zkPaCxp

Score
10/10
mastergccybergate

Malware Config

Extracted

Family

cybergate

Version

2.6

Botnet

MasterGC

C2

gamer2.no-ip.org:444

gamer2.no-ip.org:666
Mutex

csrss.exe

Attributes
  • enable_keylogger

    true

  • enable_message_box

    false

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    csrss.exe

  • install_dir

    csrss.exe

  • install_file

    csrss.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    texto da mensagem

  • message_box_title

    título da mensagem

  • password

    123

Signatures

  • Cybergate family
    cybergate
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.730ac542976dcc429864c5f08ce31ec0.exe
    .exe windows:4 windows x86


    Headers

    Sections