DarkstRat 2.0
Released 16 years, 2 months ago. September 2008
Copyright © MegaSecurity
By ?
Informations
From | China |
Author | ? |
Family | DarkstRat |
Category | Remote Access |
Version | DarkstRat 2.0 |
Released Date | Sep 2008, 16 years, 2 months ago. |
Language | Delphi |
Additional Information
Server
Dropped Files:
c:\WINDOWS\system32\System64.dat Size: 72 bytes
c:\WINDOWS\system32\System64.dll Size: 296,448 bytes
Added to Registry:
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\DarkstSer "ImagePath"
Data: %SystemRoot%\system32\svchost.exe -k netservice
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\DarkstSer\Parameters "ServiceDll"
Data: C:\WINDOWS\system32\\System64.dll
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DarkstSer "ImagePath"
Data: %SystemRoot%\system32\svchost.exe -k netservice
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DarkstSer\Parameters "ServiceDll"
Data: C:\WINDOWS\system32\\System64.dll
Tested on Windows XP
2008, October 20, 2008
If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.