Angelfire (b)

Copyright © MegaSecurity

By ?


Informations
Author ?
Family Angelfire
Category Remote Access
Version Angelfire (b)
Language Visual Basic
Additional Information
dropped files:
c:\WINDOWS\SYSTEM\info            size: 6 bytes 
c:\WINDOWS\SYSTEM\msinet.ocx      size: 115.920 bytes 
c:\WINDOWS\SYSTEM\nicklist.txt    size: 142 bytes 
c:\WINDOWS\SYSTEM\updater.exe     size: 142 bytes 
c:\WINDOWS\SYSTEM\winregsrv.exe   size: 315.392 bytes

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "winregsrv"

If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.