Fake Slh RAT 5.0.1

Copyright © MegaSecurity

By SantasDad, ripped / modified La VozR


Fake Slh RAT 5.0.1
Informations
Author SantasDad, ripped / modified La VozR
Family Slh RAT
Category Remote Access
Version Fake Slh RAT 5.0.1
Additional Information
Server
Dropped file:
c:\WINDOWS\system32\server.exe
Size: 33,384 bytes 

Startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{A9260CCB-B2B6-7B3B-D778-C92DBC5AEE18} "StubPath"
Data: C:\WINDOWS\system32\server.exe 



Tested on Windows XP
April 03, 2008

If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.