Robber

Released 18 years, 6 months ago. May 2006

Copyright © MegaSecurity

By Radon


Robber
Informations
From The Middle East
Author Radon
Family Robber
Category Remote Access
Version Robber
Released Date May 2006, 18 years, 6 months ago.
Language Visual Basic
Additional Information
Server
Dropped File:
c:\WINDOWS\system32\netcmd.exe
Size: 41,003 bytes 

Startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell"
Old data: Explorer.exe 
New data: explorer.exe netcmd.exe 



Tested on Windows XP
August 23, 2008

If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.