SkD RAT 1.0

Released 19 years, 5 months ago. June 2005

By SkD

Informations

Author	SkD
Family	SkD RAT
Category	Remote Access
Version	SkD RAT 1.0
Released Date	Jun 2005, 19 years, 5 months ago.
Language	Visual Basic

Additional Information

Server:
dropped files:
c:\templog.txt                                 Size: 103 bytes 
c:\WINDOWS\eimsn.exe                           Size: 57,344 bytes 
c:\WINDOWS\system32\rewt\servertemplate.exe    Size: 446,464 byte

port: 1234 TCP

startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows "load"
old data: 
new data: C:\WINDOWS\system32\rewt\servertemplate.exe 

HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows "run"
data: C:\WINDOWS\system32\rewt\servertemplate.exe 


tested on Windows XP
June 06, 2005

Author Information / Description

Some thing's you have to know:
-Remember to RESTART Server before disconnecting because you may have problem's in connecting to the server again.
-Use E-Mail Notification to know when the victim is online and his IP address to connect to.
-After version 0.6, Screenshot function stopped working properly.
-Services manager is underconstruction.
-After packing the edited dloader.exe, size may be around 10 KB.
-Do not pack the template server and downloader .exe's.
-After packing the edited server .exe, you may encounter problem's with E-Mail notification.
-The server uses MsWinsck.ocx after version 0.9, it installs the .ocx and a MSN Password grabber.[ That's why the server has such a big size ] .

SkD