Extracted

Extracted

• • Target

    86004037123c4813357c62f197b2fd86_JaffaCakes118

  • Size

    340KB

  • MD5

    86004037123c4813357c62f197b2fd86

  • SHA1

    5ea2b1e0fc46a86f6175c724a859f73b3304b810

  • SHA256

    62350c842e92e42479ecc33393f1bb66249f4fc7497339e7fd3f844601888490

  • SHA512

    f2af14b2f7af0d4bcbf4ec52eda01740dd9cf4e858f4e0f01cc0b79dc5f844eac2f099980283b9ec1703d0d81ea7e96daa70c8007ba7cab6c7705b9f46bda051

  • SSDEEP

    6144:Wri4VUvosM3Ko+BYXU6MILnS+rl8bZicy/UWCl56mNzYv9FnptF0AQJTJ:WGcUwZ3v+t6HSo0ZicysWvme/x

  Score

  10^/10

  cybergatelatentbotxcubediscoverystealertrojanupx

  • CyberGate, Rebhip

    CyberGate is a lightweight remote administration tool with a wide array of functionalities.

    trojanstealercybergate

  • Cybergate family

    cybergate

  • LatentBot

    Modular trojan written in Delphi which has been in-the-wild since 2013.

    trojanlatentbot

  • Latentbot family

    latentbot

  • Uses the VBS compiler for execution

  • Suspicious use of SetThreadContext

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2