DarkstRat 1.2
Released 16 years, 4 months ago. July 2008
Copyright © MegaSecurity
By ?
Informations
From | China |
Author | ? |
Family | DarkstRat |
Category | Remote Access |
Version | DarkstRat 1.2 |
Released Date | Jul 2008, 16 years, 4 months ago. |
Language | Delphi |
Additional Information
Server
Dropped Files:
c:\WINDOWS\system32\System64.dll Size: 161,280 bytes
c:\WINDOWS\system32\System64.exe Size: 264,704 bytes
Added to Registry:
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\DarkstSer "ImagePath"
Data: %SystemRoot%\system32\svchost.exe -k netservice
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DarkstSer "ImagePath"
Data: %SystemRoot%\system32\svchost.exe -k netservice
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\DarkstSer\Parameters "ServiceDll"
Data: C:\WINDOWS\system32\System64.dll
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DarkstSer\Parameters "ServiceDll"
Data: C:\WINDOWS\system32\System64.dll
Tested on Windows XP
2008, September 03, 2008
If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.