Gh0stRAT 3.5
Released 16 years, 5 months ago. May 2008
Copyright © MegaSecurity
By C.Rufus Security Team
Informations
| From | China |
| Author | C.Rufus Security Team |
| Family | Ghost |
| Category | Remote Access |
| Version | Gh0stRAT 3.5 |
| Released Date | May 2008, 16 years, 5 months ago. |
Additional Information
Server
Dropped File:
c:\WINDOWS\system32\6to4ex.dll
Size: 101,419 bytes
Added to Registry:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\6to4 "ImagePath"
Data: %SystemRoot%\System32\svchost.exe -k netsvcs
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\6to4\Parameters "ServiceDll"
Data: C:\WINDOWS\system32\6to4ex.dll
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\6to4\Parameters "ServiceDll"
Data: C:\WINDOWS\system32\6to4ex.dll
Tested on Windows XP
August 13, 2008If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.