ARAB RAT
Released 18 years, 8 months ago. March 2006
Copyright © MegaSecurity
By QwEErz
Informations
Author | QwEErz |
Family | ARAB RAT |
Category | Remote Access |
Version | ARAB RAT |
Released Date | Mar 2006, 18 years, 8 months ago. |
Language | Visual Basic |
Additional Information
Server:
dropped files:
c:\WINDOWS\arar.exe Size: 139,264 bytes
c:\WINDOWS\system32\Aroot.exe Size: 71,292 bytes
c:\WINDOWS\system32\explorer.dll Size: 88,576 bytes
c:\WINDOWS\system32\iexplore.dll Size: 82,944 bytes
c:\WINDOWS\system32\jpg.dll Size: 53,248 bytes
c:\WINDOWS\system32\Kernel.bat Size: 7,552 bytes
startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Aroot.exe"
data: C:\WINDOWS\System32\Aroot.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Windows Logon Application"
data: C:\WINDOWS\Csrss.exe
tested on Windows XP
December 07, 2006
If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.