Remote Shell 1.2

Released 18 years, 8 months ago. January 2006

Copyright © MegaSecurity

By Impostor


Remote Shell 1.2
Informations
From Iran
Author Impostor
Family Remote Shell
Category Remote Access
Version Remote Shell 1.2
Released Date Jan 2006, 18 years, 8 months ago.
Language Delphi
Additional Information
dropped file:
c:\Documents and Settings\%user%\Local Settings\Temp\InterBase.exe
size: 9,039 bytes 

port: 979 TCP

startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "InterBase"
data: C:\DOCUME~1\%user%\LOCALS~1\Temp\InterBase.exe 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "SecurityCenter"
data: C:\DOCUME~1\%user%\LOCALS~1\Temp\InterBase.exe 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Runservices "InterBase"
data: C:\DOCUME~1\%user%\LOCALS~1\Temp\InterBase.exe 

tested on Windows XP
January 17, 2006

If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.