Kilo Server

Copyright © MegaSecurity

By BloodWalker


Informations
Author BloodWalker
Family Kilo
Category Remote Access
Version Kilo Server
Language Delphi
Additional Information
dropped files:
c:\WINDOWS\SYSTEM\boot.dat     Size: 34 bytes 
c:\WINDOWS\SYSTEM\SvaWa.exe    Size: 1.047.040 bytes 

port: 6711, 6718, 1234 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Boot Manager"
data: C:\WINDOWS\System\SvaWa.exe 


tested on Windows 98
October 14, 2005

If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.