CommInet (p)

Copyright © MegaSecurity

By ?


Informations
Author ?
Family CommInet
Category Remote Access
Version CommInet (p)
Additional Information
dropped file:
c:\WINDOWS\hostdll.exe
size: 13,828 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "hostdll.exe"
data: C:\WINDOWS\hostdll.exe 

MD5: 1532c7bf7f71c4fc314f5a4df098eb68

attempts to connect to an IP located in Argentina

the text string "INETCOMM Server Passwords" can be found in the executable



tested on Windows XP
May 03, 2005

If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.