Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

JaffaCakes...c2.exe

windows7-x64

JaffaCakes...c2.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_6098378c64a018b45d71092d51dad5c2

  • Size

    214KB

  • Sample

    250310-wkvvmatjy7

  • MD5

    6098378c64a018b45d71092d51dad5c2

  • SHA1

    7a07cfa83bb166fcd1bc39899629a023b98b3a9d

  • SHA256

    94fd6164d9519c5e065dc962e5d1ed95bee3ded75a4ede0da49befa48dc106a1

  • SHA512

    10bc58584762fa028ca9fe1b8e5ab1304ee7fcb265b484bbf846728a0bb6340669d776aa1dc999506efc9ddab1cbf157c4eab23a276cb7f705ac4487c09f0bb7

  • SSDEEP

    6144:cRjC+LsxZZQttyCVxaWYSda4bHPS9x6qr6jDRPWv:Gj5eAtpVxag1bvgx6Ndq

Score
10/10
cybergateremote

Malware Config

Extracted

Family

cybergate

Version

v1.03.0

Botnet

remote

C2

127.0.0.1:7777

playboy.zapto.org:7777
Mutex

N00I75A85X3H3J

Attributes
  • enable_keylogger

    true

  • enable_message_box

    false

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    explorer.exe

  • install_dir

    WindowsUpdate

  • install_file

    Svchost.exe

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    Remote Administration anywhere in the world.

  • message_box_title

    CyberGate

  • password

    cybergate

  • regkey_hkcu

    HKCU

  • regkey_hklm

    HKLM

Targets

    • Target

      JaffaCakes118_6098378c64a018b45d71092d51dad5c2

    • Size

      214KB

    • MD5

      6098378c64a018b45d71092d51dad5c2

    • SHA1

      7a07cfa83bb166fcd1bc39899629a023b98b3a9d

    • SHA256

      94fd6164d9519c5e065dc962e5d1ed95bee3ded75a4ede0da49befa48dc106a1

    • SHA512

      10bc58584762fa028ca9fe1b8e5ab1304ee7fcb265b484bbf846728a0bb6340669d776aa1dc999506efc9ddab1cbf157c4eab23a276cb7f705ac4487c09f0bb7

    • SSDEEP

      6144:cRjC+LsxZZQttyCVxaWYSda4bHPS9x6qr6jDRPWv:Gj5eAtpVxag1bvgx6Ndq

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks