Overview

overview

10

Static

static

10

66ca6d94db...18.exe

windows7-x64

10

66ca6d94db...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    66ca6d94db35a21516e8a2cc6cc87375_JaffaCakes118

  • Size

    301KB

  • MD5

    66ca6d94db35a21516e8a2cc6cc87375

  • SHA1

    bec1e70ca292e4ca0ebd87a9eeeb76ca644288f7

  • SHA256

    10760050e7d8af4a64d2461c4bd617411ef683163dae1a7fca697b0f2391889a

  • SHA512

    cf4253426d783639d5f9958955e373f70242bfd748fe04dbf88605fb0d83fcf31810ab37393c286a830198b537c452c41e8b0850608fe5f8ed00f09e9edadc75

  • SSDEEP

    6144:umcD66RRje5JGmrpQsK3RD2u270jupCJsCxCb:LcD663HZ2zkPaCxy

Score
10/10
öííécybergate

Malware Config

Extracted

Family

cybergate

Version

2.6

Botnet

ÖÍíÉ

C2

mrbassm.no-ip.biz:288

Mutex

***MUTEX***

Attributes
  • enable_keylogger

    true

  • enable_message_box

    false

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    svchost.exe

  • install_file

    windows.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    texto da mensagem

  • message_box_title

    t?tulo da mensagem

  • password

    abcd1234

Signatures

  • Cybergate family
    cybergate
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 66ca6d94db35a21516e8a2cc6cc87375_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections