Beast (b) Server

Copyright © MegaSecurity

By Tataye


Informations
From Rumania
Author Tataye
Family Beast
Category Remote Access
Version Beast (b) Server
Language Delphi
Additional Information
dropped files:
c:\WINDOWS\bvcl.exe            size: 31.487 bytes 
c:\WINDOWS\msagent\msfsrg.com  size: 31.487 bytes 

port: 1042 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run "bvcl"
data: C:\WINDOWS\msagent\msfsrg.com 


tested on Windows XP
January 03, 2005

If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.