ShadowPhyre 2.12.42
Copyright © MegaSecurity
By Cheitan, Mayhem and Phr33k
Informations
| Author | Cheitan, Mayhem and Phr33k |
| Family | ShadowPhyre |
| Category | Remote Access |
| Version | ShadowPhyre 2.12.42 |
Additional Information
Server:
dropped files:
C:\WINDOWS\SYSTEM\WinZipp.exe
C:\WINDOWS\SYSTEM\inet.exe
size: 200 KB
port: random
startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesIf you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.