Dosh (c)

Copyright © MegaSecurity

By ?


Informations
From China
Author ?
Family Dosh
Category Remote Access
Version Dosh (c)
Language Visual Basic
Additional Information
Dropped file:
c:\WINDOWS\system32\oce32.wdep
size: 827,392 bytes 

added to registry:
HKEY_CLASSES_ROOT\.wdep "(Default)"
data: dpendfile 

HKEY_CLASSES_ROOT\dpendfile "(Default)"
data: Windows Dependent 

HKEY_CLASSES_ROOT\dpendfile\DefaultIcon "(Default)"
data: c:\windows\system\shell32.dll,-154 

HKEY_CLASSES_ROOT\dpendfile\shell\open\command "(Default)"
data: "%1" %* 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "oec"
data: c:\windows\system32\oce32.wdep 



tested on WindowsXP
February 27, 2005

If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.