Shext
Copyright © MegaSecurity
By ?
Informations
Author | ? |
Family | Shext |
Category | Remote Access |
Version | Shext |
Language | Delphi, compressed with UPX |
Additional Information
dropped file:
c:\WINNT\SHEXT.EXE
size: 421.888 bytes
startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "shellext.exe"
data: shext.exe
does (try to) connect to an address in Russia on port 21
tested on win2000
If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.