Overview

overview

10

Static

static

10

0f1b4cb7c1...d4.exe

windows7-x64

10

0f1b4cb7c1...d4.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0f1b4cb7c188f46ed2efdff0fd6aaad4.exe

  • Size

    282KB

  • MD5

    0f1b4cb7c188f46ed2efdff0fd6aaad4

  • SHA1

    81a7be98506711ab0cf5b9fd59adf09fe1a50e4a

  • SHA256

    e36316832c18e43d36db45a0baeb29e2e0f89c3d2c9460b7499e5ee6e9830f72

  • SHA512

    6c23639a869eb18b9fd8e8e5d8e5aff1b511feae9ea51cc57645926f51f447aa2ada3e6a6272bade0dfbfdd6c57ca8318bda94fa12f0cb8fd690ece8ec5e68d7

  • SSDEEP

    6144:VxJsGLnZoxDNT/xQphU+jrlgzfuzt91C9NDyWId98HhqbxtHGZF:HJsG94h/xQp6+tqOYy9zo0c

Score
10/10
remotecybergate

Malware Config

Extracted

Family

cybergate

Version

v1.01.12

Botnet

remote

C2

testhostir.ddns.net:80

192.168.0.104:80
Mutex

CyberGate1

Attributes
  • enable_keylogger

    true

  • enable_message_box

    false

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    explorer.exe

  • install_dir

    install

  • install_file

    server.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    Remote Administration anywhere in the world.

  • message_box_title

    CyberGate

  • password

    cybergate

Signatures

  • Cybergate family
    cybergate
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0f1b4cb7c188f46ed2efdff0fd6aaad4.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections