SRaT 1.7 Build 1105
Released 16 years, 1 month ago. October 2008
Copyright © MegaSecurity
By Neishei131
Informations
| From | China/font> |
| Author | Neishei131 |
| Family | SRaT |
| Category | Remote Access |
| Version | SRaT 1.7 Build 1105 |
| Released Date | Oct 2008, 16 years, 1 month ago. |
| Language | Delphi |
Additional Information
Server:
Dropped Files:
c:\WINDOWS\system32\U8D0GRWuXV.ini Size: 3 bytes
c:\WINDOWS\system32\drivers\etc\CSe5KIR6.dll Size: 136,510 bytes
Added to Registry:
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SRAT_Service "ImagePath"
Data: %SystemRoot%\System32\svchost.exe -k netsvcs
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SRAT_Service\Parameters "ServiceDLL"
Data: %SystemRoot%\system32\drivers\etc\CSe5KIR6.dll
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SRAT_Service "ImagePath"
Data: %SystemRoot%\System32\svchost.exe -k netsvcs
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SRAT_Service\Parameters "ServiceDLL"
Data: %SystemRoot%\system32\drivers\etc\CSe5KIR6.dll
Tested on Windows XP
February 28, 2009If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.