I Feel Lucky I Feel Very Lucky

Messiah 1.0 v2

Copyright © MegaSecurity

By Splinter

Informations
Author Splinter
Family Messiah
Category Remote Access
Version Messiah 1.0 v2
Language Visual Basic
Additional Information 
Server:
dropped files:
c:\WINDOWS\system\Cur.cur            Size: 2,240 bytes 
c:\WINDOWS\system\MSWINSOCK.ocx      Size: 108,336 bytes 
c:\WINDOWS\system\Update.exe         Size: 303,104 bytes 
c:\WINDOWS\system32\MSWINSOCK.ocx    Size: 108,336 bytes 

startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Windows Updates"
data: c:\windows\system\Update.exe 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Windows Updates"
data: c:\windows\system\Update.exe 


tested on Windows XP
January 09, 2007

If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.