Extracted

• • Target

    a8bfe7df2f4d9b547c4e85ccc89973f4_JaffaCakes118

  • Size

    5.9MB

  • MD5

    a8bfe7df2f4d9b547c4e85ccc89973f4

  • SHA1

    270fe328a8a70efffa1419e906c1aea6055be3ac

  • SHA256

    e5cba6c7c3799af656089ca87949fd6e80cb7b52f1cce0e6c90a74cc4b7b4c9e

  • SHA512

    9ff7c2ced52a2de40b15f8e5007123f32dc0211d904f4e714fa9612043d304f30f24941b3bb46f82901f5633fec8446ef9626a1c3f569065198eb74dde2d9742

  • SSDEEP

    98304:GvxwIPd8ETSTQcxfHdqCWS13hr1E9TrmRsb4tUPexufd8biYsSmq8Ydpe:RanuDMCWSLhE9TySUtUPecmmSp7

  Score

  10^/10

  cybergatecybercredential_accessdiscoverypersistencespywarestealertrojanupx

  • CyberGate, Rebhip

    CyberGate is a lightweight remote administration tool with a wide array of functionalities.

    trojanstealercybergate

  • Cybergate family

    cybergate

  • Adds policy Run key to start application

    persistence

  • Boot or Logon Autostart Execution: Active Setup

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Reads data files stored by FTP clients

    Tries to access configuration files associated with programs like FileZilla.

    spywarestealer

  • Reads local data of messenger clients

    Infostealers often target stored data of messaging applications, which can include saved credentials and account information.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Unsecured Credentials: Credentials In Files

    Steal credentials from unsecured files.

    credential_accessstealer

  • Adds Run key to start application

    persistence

  • Drops file in System32 directory

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2