Bossat

Copyright © MegaSecurity

By b0ss


Informations
Author b0ss
Family Bossat
Category Remote Access
Version Bossat
Additional Information
Server:
dropped file:
c:\WINDOWS\SYSTEM\winsys.exe 

size: 13.824 bytes 

port: 113 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Windows" 

additional information:
Tries to connect to specified IRC server and joins a channel to listen for commands 
Used for DDOS attacks

If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.