DTr 1.5 (c)
Copyright © MegaSecurity
By Danil
Informations
| From | Ukrainia |
| Author | Danil |
| Family | DTr |
| Category | Remote Access |
| Version | DTr 1.5 (c) |
Additional Information
Server:
dropped files:
c:\WINDOWS\system32\dtrV.dat size: 45 bytes
c:\WINDOWS\system32\DtrVk.dll size: 5.120 bytes
c:\WINDOWS\system32\nbsystem.dll size: 3.072 bytes
c:\WINDOWS\system32\NBSYSTEM.EXE size: 41.984 bytes
port: 10001 TCP
added to registry:
HKEY_CLASSES_ROOT\CLSID\{0F0D027B-B640-4C21-A938-5819495CE53A}\InProcServer32 "(Default)"
data: nbsystem.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad "NBSYSTEM"
data: {0F0D027B-B640-4C21-A938-5819495CE53A}
tested on Windows XP
November 19, 2004If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.