hamTaRo 5.2

Released 18 years, 11 months ago. May 2006

Copyright © MegaSecurity

By MaLy


hamTaRo 5.2
Informations
From Poland
Author MaLy
Family hamTaRo
Category Remote Access
Version hamTaRo 5.2
Released Date May 2006, 18 years, 11 months ago.
Language Delphi
Additional Information
Server:
dropped file:
c:\WINDOWS\svchost.exe    Size: 4,378,112 bytes 

port: 14920, 21 TCP

added to registry:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System "DisableRegistryTools"
data: 01, 00, 00, 00 

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "svchost"
data: C:\Windows\svchost.exe 

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List "C:\Windows\svchost.exe"
data: C:\Windows\svchost.exe:*:Enabled:svchost 
	
	
	
tested on Windows XP
May 17, 2006

If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.