Shext

Copyright © MegaSecurity

By ?


Informations
Author ?
Family Shext
Category Remote Access
Version Shext
Language Delphi, compressed with UPX
Additional Information
dropped file:
c:\WINNT\SHEXT.EXE 

size: 421.888 bytes

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "shellext.exe" 
data: shext.exe

does (try to) connect to an address in Russia on port 21

tested on win2000

If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.