Blackhole 2004 Build 20040712

Released 20 years, 2 months ago. July 2004

Copyright © MegaSecurity

By lovejingtao


Blackhole 2004 Build 20040712
Informations
From China
Author lovejingtao
Family Blackhole
Category Remote Access
Version Blackhole 2004 Build 20040712
Released Date Jul 2004, 20 years, 2 months ago.
Language Delphi, compressed with UPX
Additional Information
Client:
port: 2004 TCP



Server:
dropped files:
c:\WINNT\%server.exe%           size: 198.310 bytes 
c:\WINNT\system32\FinDriv.dll   size: 25.600 bytes 

port: 1144 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

tested on win2000

If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.