Dark Moon 1.0 version 2

Released 20 years, 3 months ago. August 2004

Copyright © MegaSecurity


Informations
Family Dark Moon
Category Remote Access
Version Dark Moon 1.0 version 2
Released Date Aug 2004, 20 years, 3 months ago.
Language Delphi, compressed with UPX
Additional Information
Client:
port: 28888, 80  TCP




Server:
dropped files:
c:\WINDOWS\SYSTEM\SP00LSV.EXE     size: 28.160 bytes 
c:\WINDOWS\SYSTEM\WINL0G0N.EXE    size: 28.160 bytes 

port: 8086, 8087, 25555, 2600, 1027, 23333 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "WINLOGON"
data: WINL0G0N.EXE

If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.