DarkstRat 1.2

Released 16 years, 4 months ago. July 2008

Copyright © MegaSecurity

By ?


Informations
From China
Author ?
Family DarkstRat
Category Remote Access
Version DarkstRat 1.2
Released Date Jul 2008, 16 years, 4 months ago.
Language Delphi
Additional Information
Server
Dropped Files:
c:\WINDOWS\system32\System64.dll    Size: 161,280 bytes 
c:\WINDOWS\system32\System64.exe    Size: 264,704 bytes 


Added to Registry:
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\DarkstSer "ImagePath"
Data: %SystemRoot%\system32\svchost.exe -k netservice 

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DarkstSer "ImagePath"
Data: %SystemRoot%\system32\svchost.exe -k netservice 

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\DarkstSer\Parameters "ServiceDll"
Data: C:\WINDOWS\system32\System64.dll 
	
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DarkstSer\Parameters "ServiceDll"
Data: C:\WINDOWS\system32\System64.dll 

Tested on Windows XP
2008, September 03, 2008

If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.