General
-
Target
7b6650eb191b719cdc3789f535da1f67
-
Size
346KB
-
Sample
240127-1yta6sfabp
-
MD5
7b6650eb191b719cdc3789f535da1f67
-
SHA1
29390ca592f2d5ccee98e576b8ed032950f4a289
-
SHA256
504eb8340c141d419094733b97a46239a073acaa07490877335a125647fdab57
-
SHA512
c3e62cdd3d653b55b30d7f6e05d1ae20d8c37a76969028afdb2716ff3421d5c56023fb34480315fdb1b4dce224f43a09a17c9e5d4a82ab536f198933a414ad39
-
SSDEEP
6144:6mcD66RRj0ZwzZwl5JGmrpQsK3RD2u270jupCJsCxCY:PcD66300lZ2zkPaCxN
Behavioral task
behavioral1
Sample
7b6650eb191b719cdc3789f535da1f67.exe
Resource
win7-20231215-en
Malware Config
Extracted
cybergate
2.6
vítima
mr-falcon.dyndns.biz:81
***MUTEX***
-
enable_keylogger
true
-
enable_message_box
false
-
ftp_directory
./logs/
-
ftp_interval
30
-
injected_process
explorer.exe
-
install_dir
install
-
install_file
good.exe
-
install_flag
true
-
keylogger_enable_ftp
false
-
message_box_caption
texto da mensagem
-
message_box_title
título da mensagem
-
password
abcd1234
Targets
-
-
Target
7b6650eb191b719cdc3789f535da1f67
-
Size
346KB
-
MD5
7b6650eb191b719cdc3789f535da1f67
-
SHA1
29390ca592f2d5ccee98e576b8ed032950f4a289
-
SHA256
504eb8340c141d419094733b97a46239a073acaa07490877335a125647fdab57
-
SHA512
c3e62cdd3d653b55b30d7f6e05d1ae20d8c37a76969028afdb2716ff3421d5c56023fb34480315fdb1b4dce224f43a09a17c9e5d4a82ab536f198933a414ad39
-
SSDEEP
6144:6mcD66RRj0ZwzZwl5JGmrpQsK3RD2u270jupCJsCxCY:PcD66300lZ2zkPaCxN
-