Messiah 3.0

Released 20 years ago. November 2004

Copyright © MegaSecurity

By Splinter


Informations
Author Splinter
Family Messiah
Category Remote Access
Version Messiah 3.0
Released Date Nov 2004, 20 years ago.
Language Visual Basic
Additional Information
Server:
dropped files:
c:\WINDOWS\Update.exe          size: 240.046 bytes 
c:\WINDOWS\system\Cur.cur      size: 2.240 bytes 
c:\WINDOWS\system\Update.exe   size: 240.046 bytes 
c:\WINDOWS\system32\Update.exe size: 240.046 bytes 

port: 876, 1216, 958 TCP

startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Windows Update"
data: c:\windows\system\Update.exe /
 
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Windows Update"
data: c:\windows\system32\Update.exe / 

tested on Windows XP
November 12, 2004

If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.