I Feel Lucky I Feel Very Lucky

ICMP-Cmd

Released 21 years, 3 months ago. August 2003

Copyright © MegaSecurity

By gxisone

Informations
Author gxisone
Family ICMP-Cmd
Category Remote Access
Version ICMP-Cmd
Released Date Aug 2003, 21 years, 3 months ago.
Additional Information 
Server:
dropped file:
c:\WINNT\system32\ntkrnl.exe 

size: 11.776 bytes 

startup:
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_NTKRNL 
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_NTKRNL\0000 
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_NTKRNL\0000\Control 
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ntkrnl 
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ntkrnl\Enum 
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ntkrnl\Security 
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NTKRNL 
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NTKRNL\0000 
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NTKRNL\0000\Control 
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ntkrnl 
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ntkrnl\Enum 
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ntkrnl\Security 


remark:
tested on Win2000

If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.