I Feel Lucky I Feel Very Lucky

IRAT Built 1001

Released 16 years, 11 months ago. October 2007

Copyright © MegaSecurity

By HF

Informations
From China
Author HF
Family IRAT
Category Remote Access
Version IRAT Built 1001
Released Date Oct 2007, 16 years, 11 months ago.
Language Delphi
Additional Information 
Server:
Dropped Files:
c:\WINDOWS\system32\IRAT.DLL        Size: 58,981 bytes 
c:\WINDOWS\system32\IRAT.DLL.uns    Size: 8,192 bytes 

Added to Registry:
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_IRAT\0000\Control
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\IRAT\Enum
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\IRAT\Parameters
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\IRAT\Security
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_IRAT\0000\Control
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\IRAT
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\IRAT\Enum
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\IRAT\Parameters
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\IRAT\Security



Tested on Windows XP
October 09, 2007

If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.