Phoenix II 1.50

Released 23 years, 2 months ago. September 2001

Copyright © MegaSecurity

By C)DMP & Kaos³


Informations
From Italy
Author C)DMP & Kaos³
Family Phoenix II
Category Remote Access
Version Phoenix II 1.50
Released Date Sep 2001, 23 years, 2 months ago.
Language Microsoft Visual C++

Author Information / Description
Server:
dropped files:
c:\WINDOWS\Msatrib.exe       size: 208.896 bytes 
c:\WINDOWS\TEMP\~PJNMXXI.exe size: 208.896 bytes 

Port: 7410 TCP

added to registry:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Msatrib"
data: C:\WINDOWS\Msatrib.exe 

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce "~PJNMXXI"
data: C:\WINDOWS\Msatrib.exe /del:C:\WINDOWS\TEMP\~PJNMXXI.exe 

tested on Windows 98
November 18, 2004

If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.