Hav-RAT 1.3.0 Private Knieme

Released 17 years, 6 months ago. May 2007

Copyright © MegaSecurity

By Havalito


Informations
From Sweden
Author Havalito
Family Hav-RAT
Category Remote Access
Version Hav-RAT 1.3.0 Private Knieme
Released Date May 2007, 17 years, 6 months ago.
Language Delphi
Additional Information
Server:
dropped files:
c:\WINDOWS\system32\orb32wvx\rhb32swo.exe                                     Size: 34,128 bytes 
c:\Documents and Settings\%user%\Local Settings\Temp\IXP000.TMP\gncbdg.exe    Size: 34,128 bytes 	

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5B7AC5A1-6568-13F1-261B-67911AF4B4D8} "stubpath"
data: C:\WINDOWS\System32\orb32wvx\rhb32swo.exe s 
	
	
tested on Windows XP
July 08, 2007

If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.