A-311 Death 1.03 (e & f)
Released 21 years, 3 months ago. August 2003
Copyright © MegaSecurity
By Corpse
Informations
From | Russia |
Author | Corpse |
Family | A-311 Death |
Category | Remote Access |
Version | A-311 Death 1.03 (e & f) |
Released Date | Aug 2003, 21 years, 3 months ago. |
Language | MASM |
Additional Information
Server:
dropped files:
c:\WINNT\system32\gate32.sys size: 12.704 bytes
c:\WINNT\system32\mprexe.exe size: 23.664 bytes
c:\WINNT\system32\snowx.ini size: 320 bytes
c:\WINNT\system32\status.dll size: 19.968 bytes
c:\WINNT\system32\config\SSL size: 24.576 bytes
added to registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\status
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_GATE32\0000\Control
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\gate32\Enum
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\gate32\Security
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_GATE32\0000\Control
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gate32\Enum
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gate32\Security
port: 16661 TCP
teted on Win2000
If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.