Gargamel
Copyright © MegaSecurity
By ?
Informations
| From | Czech Republic |
| Author | ? |
| Family | Gargamel |
| Category | Remote Access |
| Version | Gargamel |
| Language | C |
Additional Information
Backdoor.Gargamel.a:
dropped file:
c:\WINDOWS\SYSTEM\SYST32.EXE
size: 25.422 bytes
startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "System32"
does pop up internet explorer
launches silently windows ftp (ftp -v -i -s) and tries to connect to an IP in Czech RepublicIf you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.