General
-
Target
8de6c349367ceb0483ff6cd50c3c0589_JaffaCakes118
-
Size
334KB
-
Sample
240812-jl12tawcrh
-
MD5
8de6c349367ceb0483ff6cd50c3c0589
-
SHA1
706b53be1f28d76c1d8ccd3c78f42f42bf3836f7
-
SHA256
4fca59c7ac43625b18eec129e3ba0ee318f668127db8b612700a043b4895c9e3
-
SHA512
7673efd9f0508ca06df8994837f2c2d0f88a484b91f71955c6c91a7d3367433750d2aeaaf0c11f8797eb0cef36d0fcf26859888916b8412b129699f3a939f311
-
SSDEEP
6144:YOpslFlq+hdBCkWYxuukP1pjSKSNVkq/MVJbSRSsQLH5AI:YwslhTBd47GLRMTbKSsPI
Behavioral task
behavioral1
Sample
8de6c349367ceb0483ff6cd50c3c0589_JaffaCakes118.exe
Resource
win7-20240708-en
Malware Config
Extracted
cybergate
v1.07.5
Cyber
cheaterboy519.no-ip.info:100
M77R70P557LHI3
-
enable_keylogger
true
-
enable_message_box
true
-
ftp_directory
./logs/
-
ftp_interval
30
-
injected_process
explorer.exe
-
install_dir
install
-
install_file
server.exe
-
install_flag
true
-
keylogger_enable_ftp
false
-
message_box_caption
File Corrupted
-
message_box_title
CyberGate
-
password
hyderabad
Targets
-
-
Target
8de6c349367ceb0483ff6cd50c3c0589_JaffaCakes118
-
Size
334KB
-
MD5
8de6c349367ceb0483ff6cd50c3c0589
-
SHA1
706b53be1f28d76c1d8ccd3c78f42f42bf3836f7
-
SHA256
4fca59c7ac43625b18eec129e3ba0ee318f668127db8b612700a043b4895c9e3
-
SHA512
7673efd9f0508ca06df8994837f2c2d0f88a484b91f71955c6c91a7d3367433750d2aeaaf0c11f8797eb0cef36d0fcf26859888916b8412b129699f3a939f311
-
SSDEEP
6144:YOpslFlq+hdBCkWYxuukP1pjSKSNVkq/MVJbSRSsQLH5AI:YwslhTBd47GLRMTbKSsPI
-