Overview

overview

10

Static

static

10

7f5d5c2960...9b.exe

windows7-x64

10

7f5d5c2960...9b.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    7f5d5c2960fc0b8d2a3e8d739ff78e9b

  • Size

    283KB

  • MD5

    7f5d5c2960fc0b8d2a3e8d739ff78e9b

  • SHA1

    1de339c7fed8b713d39215572249473dddca6f21

  • SHA256

    642e063010f6426e2abaf1334ae7f93adc9552080367f5107d74fd7220d541cd

  • SHA512

    b5d7d386a397285cdee97be73b9a5989287c87212bfc34ab1a9a5a8ea189828e20d6285f7400a9cde1e77c4b5105921cd25d56f472465bc516d4b725a5309ba5

  • SSDEEP

    6144:+ejC86sxZZQttyCVxaWYSda4bHPS9x6qr6jDRPWHz6kp62kVR:3jmeAtpVxag1bvgx6NdC62kVR

Score
10/10
ãéò©ºº»¯cybergate

Malware Config

Extracted

Family

cybergate

Version

v1.03.0

Botnet

ÃÉÒ©ºº»¯

C2

bjzacjb123.3322.org:8000

Mutex

ATRJJ803EK617M

Attributes
  • enable_keylogger

    true

  • enable_message_box

    false

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    explorer.exe

  • install_dir

    QQ

  • install_file

    server.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    ÔÚÊÀ½çÈκεط½¿ØÖÆÄãµÄµçÄÔ.

  • message_box_title

    ÃÉÒ©

  • password

    123456

Signatures

  • Cybergate family
    cybergate
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7f5d5c2960fc0b8d2a3e8d739ff78e9b
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections