Little Witch 6.1 (aa)

Released 20 years, 11 months ago. May 2004

Copyright © MegaSecurity

By Axlito


Informations
From Argentina
Author Axlito
Family Little Witch
Category Remote Access
Version Little Witch 6.1 (aa)
Released Date May 2004, 20 years, 11 months ago.
Language Delphi
Additional Information
Server:
dropped files:
c:\WINDOWS\usr.dat             size: 420 bytes 
c:\WINDOWS\SYSTEM\Rundll.exe   size: 41.180 bytes

port: 31320 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Rundll"

registry added:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "EnableAutodial" 
HKEY_CURRENT_USER\Software\Msn "Date"

If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.