Little Witch 6.1 (a)

Released 20 years, 8 months ago. March 2004

Copyright © MegaSecurity

By Axlito


Informations
From Argentina
Author Axlito
Family Little Witch
Category Remote Access
Version Little Witch 6.1 (a)
Released Date Mar 2004, 20 years, 8 months ago.
Language Delphi
Additional Information
Server:
dropped files:
c:\WINDOWS\ini.ini           size: 72 bytes 
c:\WINDOWS\usr.dat           size: 89 bytes 
c:\WINDOWS\SYSTEM\Rundll.exe size: 273.444 bytes 
 
port: 31320 TCP

added to registry:
KEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "EnableAutodial"

HKEY_CURRENT_USER\Software\Msn "Date"

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices "RunDll"
data: RunDll

If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.