Little Witch 6.1 (d) Server

Released 20 years, 10 months ago. March 2004

Copyright © MegaSecurity

By Axlito


Informations
From Argentina
Author Axlito
Family Little Witch
Category Remote Access
Version Little Witch 6.1 (d) Server
Released Date Mar 2004, 20 years, 10 months ago.
Language Delphi, compressed with UPX
Additional Information
Server:
dropped files:
c:\WINDOWS\usr.dat                Size: 89 bytes 
c:\WINDOWS\system32\Rundll.exe    Size: 91,736 bytes 

port: 31320n TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Rundll"
data: Rundll.exe 



tested on Windows XP
January 12, 2006

If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.