Darkmoon 4.10 v2

Released 19 years, 7 months ago. April 2005

Copyright © MegaSecurity


Informations
Family Dark Moon
Category Remote Access
Version Darkmoon 4.10 v2
Released Date Apr 2005, 19 years, 7 months ago.
Language Delphi
Additional Information
Server:
dropped files:
c:\WINDOWS\system32\EXPL0RER.EXE         Size: 45,656 bytes 
c:\WINDOWS\system32\Sat_Apr_23_2005.txt  Size: 236 bytes 
c:\WINDOWS\system32\SP00LSV.EXE          Size: 45,656 bytes 

port: 800, 25555 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "EXPLORER"
data: EXPL0RER.EXE 



tested on Windows XP
April 23, 2005

If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.