Danton 3.0

Copyright © MegaSecurity

By L_Killer


Informations
From Poland
Author L_Killer
Family Danton
Category Remote Access
Version Danton 3.0
Language Delphi
Additional Information
Server:
dropped file:
c:\WINDOWS\system32\D_instal
size: 25 bytes
 
port: 9697, 6969 TCP

added to registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices "Danton3"
data: C:\WINDOWS\System32\Backdoor.Danton.30.EXE /lama 

tested on Windows XP
November 21, 2004

If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.