Fake Slh RAT 5.0.1
Copyright © MegaSecurity
By SantasDad, ripped / modified La VozR
Informations
Author | SantasDad, ripped / modified La VozR |
Family | Slh RAT |
Category | Remote Access |
Version | Fake Slh RAT 5.0.1 |
Additional Information
Server
Dropped file:
c:\WINDOWS\system32\server.exe
Size: 33,384 bytes
Startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{A9260CCB-B2B6-7B3B-D778-C92DBC5AEE18} "StubPath"
Data: C:\WINDOWS\system32\server.exe
Tested on Windows XP
April 03, 2008
If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.