DTr 1.6 (c)
Copyright © MegaSecurity
By Danil
Informations
| From | Ukrainia |
| Author | Danil |
| Family | DTr |
| Category | Remote Access |
| Version | DTr 1.6 (c) |
Additional Information
Server:
dropped files:
c:\WINDOWS\system32\dtr.dat size: 45 bytes
c:\WINDOWS\system32\DtrVk.dll size: 5.120 bytes
c:\WINDOWS\system32\nbsystem.dll size: 3.072 bytes
c:\WINDOWS\system32\nbsystem.exe size: 12.800 bytes
added to registry:
HKEY_CLASSES_ROOT\CLSID\{366AC379-A258-4617-B235-7916FBBBCA99}\InProcServer32 "(Default)"
data: nbsystem.dll
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad "NBSYSTEM"
data: {366AC379-A258-4617-B235-7916FBBBCA99}
tested on Windows XP
December 26, 2004If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.