ColdDeath

Released 22 years ago. November 2002

Copyright © MegaSecurity

By Omen


Informations
From Russia
Author Omen
Family ColdDeath
Category Remote Access
Version ColdDeath
Released Date Nov 2002, 22 years ago.
Language Delphi
Additional Information
Server:
dropped file:
c:\WINDOWS\system32\IceWorld.exe
size: 482,818 bytes 

port: 27027 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell"
old data: Explorer.exe 
new data: Explorer.exe IceWorld.exe 

tested on Windows XP
November 15, 2005

If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.