Breath of Death

Released 21 years, 10 months ago. November 2002

Copyright © MegaSecurity

By Omen


Informations
From Russia
Author Omen
Family Breath of Death
Category Remote Access
Version Breath of Death
Released Date Nov 2002, 21 years, 10 months ago.
Language Delphi
Additional Information
Server:
dropped file:
c:\WINDOWS\system32\IceWorld.exe
size: 482,818 bytes 

port: 27027 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell"
old data: Explorer.exe 
new data: Explorer.exe IceWorld.exe 

tested on Windows XP
November 15, 2005

If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.