Cult (b)

Copyright © MegaSecurity

By ?


Cult (b)
Informations
Author ?
Family Cult
Category Remote Access
Version Cult (b)
Language Visual C++, packed with FSG
Additional Information
Dropped file:
c:\WINNT\system32\winupdate.exe

size: 13.040 bytes
 
startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Microsoft auto update"
data: winupdate.exe

does (try to) connect to an IRC server

tested on win2000

If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.