FeRaL

Released 20 years, 2 months ago. August 2004

By FeraliX

Informations

Author	FeraliX
Family	FeRaL
Category	Remote Access
Version	FeRaL
Released Date	Aug 2004, 20 years, 2 months ago.
Language	Visual Basic

Additional Information

Server:
dropped file:
c:\WINNT\system32\msass.exe

size: 10.752 bytes
 
port: 113 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "msass.exe"
data: C:\WINNT\system32\msass.exe
 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\runservices "msass.exe"
data: C:\WINNT\system32\msass.exe 

tested on Win2000

Author Information / Description

-== BoT Commands ==-
!LOGIN;<Password> --------- Set's You As The Owner Of The Bot.
!LOGOUT --------- Log's You Out As Owner Of The Bot.
!GETIP --------- Retrieve's The IP Of The Victim.
!GETVERSION --------- Retrieve's The Version Of The Bot The Victim Is Running.
!DOWNLOADRUN;<URL> --------- Download's A File From The Web And Execute's It.
!QUIT --------- Shut's Down The Bot.
!UNINSTALL --------- Remove's The Bot From The Remote PC.
!UDP;<IP>;<Port>;<PacketSize> --------- UPD Flood's A Specific IP.
!STOPUDP --------- Stop's The UDP Flood.

-== V1.1 ==-
- Added The Option To Compress Server With UPX.
- Fixed The Max Length A Bot Name Could Have, If It Was Longer Then 9 Characters, Multiple Bot's Were Not Able To Log In.
- Complete GUI Change.
- Fixed UDP Flood Respond Issue & Removed The Timer.
- Now Able To Stop The UDP Flood.

-== V1.0 (HS-Bot v1.1) ==-

FeraliX