Feri (b)
Copyright © MegaSecurity
By ?
Informations
| From | Hungary |
| Author | ? |
| Family | Feri |
| Category | Remote Access |
| Version | Feri (b) |
| Language | Delphi, compressed with ASPack |
Additional Information
Backdoor.Win32.Feri.b:
dropped file:
c:\WINDOWS\vbrun.exe
size: 158.208 bytes
port: 1978 TCP
startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Microsoft Visual Basic Runtime Library"
data: C:\WINDOWS\vbrun.exe
following url can be found in the binary: http://thedeadcowhu.tripod.com/deadcow.bin
tested on Windows 98
March 27, 2005If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.