IRAT 1.53 bate8

Released 16 years, 11 months ago. October 2007

Copyright © MegaSecurity

By HF


IRAT 1.53 bate8
Informations
From China
Author HF
Family IRAT
Category Remote Access
Version IRAT 1.53 bate8
Released Date Oct 2007, 16 years, 11 months ago.
Language Delphi
Additional Information
Server:
Dropped Files:
c:\Program Files\IRAT\IRAT.rmvb        Size: 59,533 bytes 
c:\Program Files\IRAT\IRAT.rmvb.uns    Size: 278 bytes 

Added to Registry:
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_IRAT\0000\Control
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\IRAT\Enum
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\IRAT\Parameters
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\IRAT\Security
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_IRAT\0000\Control
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\IRAT\Enum
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\IRAT\Parameters
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\IRAT\Security



Tested on Windows XP
January 16, 2008

If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.