Beast 2.02(b) Server
Copyright © MegaSecurity
By Tataye
Informations
| From | Rumania |
| Author | Tataye |
| Family | Beast |
| Category | Remote Access |
| Version | Beast 2.02(b) Server |
| Language | Delphi |
Additional Information
Server:
dropped file:
c:\WINDOWS\COMMAND\msassh.com
size: 75.830 bytes
port: 6666 TCP
startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "COM Service"
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "COM Service"
added:
c:\WINDOWS\SYSTEM\dxdgns.dll
c:\WINDOWS\SYSTEM\mspgmj
c:\WINDOWS\SYSTEM\mspgmj.comIf you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.