Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

d0ed48dc78...18.exe

windows7-x64

10

d0ed48dc78...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d0ed48dc78456b10468e70beceb2fef7_JaffaCakes118

  • Size

    290KB

  • MD5

    d0ed48dc78456b10468e70beceb2fef7

  • SHA1

    6406fba369f07a090696f35d94f525922ebc9387

  • SHA256

    d845d2b0787c9e10d0e317b5f746068db0922a09c676c95906a223d622cd3051

  • SHA512

    25a8f17a00f20322e80ddd906c47feb6526d7609f84a3e860b6e62e1af75df7d0c04456c2f7c83324085558dde01a40409857117b519dab294cef771233c96c6

  • SSDEEP

    6144:MGcD6Jt+jG5JGmrpQsK3RD2u270juJCJsCxCW:dcD6Jo/Z2zkvaCx/

Score
10/10
vítimacybergate

Malware Config

Extracted

Family

cybergate

Version

2.6

Botnet

vítima

C2

memo6767.no-ip.org:1759

Mutex

***MUTEX***

Attributes
  • enable_keylogger

    true

  • enable_message_box

    false

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    explorer.exe

  • install_dir

    install

  • install_file

    server.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    texto da mensagem

  • message_box_title

    título da mensagem

  • password

    abcd1234

Signatures

  • Cybergate family
    cybergate
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d0ed48dc78456b10468e70beceb2fef7_JaffaCakes118
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.