Troya 1.32
Released 18 years, 11 months ago. December 2005
Copyright © MegaSecurity
By Mohammad
Informations
From | Iran |
Author | Mohammad |
Family | Troya |
Category | Remote Access |
Version | Troya 1.32 |
Released Date | Dec 2005, 18 years, 11 months ago. |
Language | Delphi, compressed with PECompact |
Additional Information
Server:
dropped files:
c:\WINDOWS\WinLoaderXP.exe Size: 275,456 bytes
c:\WINDOWS\system32\explorer64.exe Size: 11,264 bytes
port: 800 TCP
startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "GenericHostXP"
data: C:\WINDOWS\WinLoaderXP.exe
tested on Windows XP
March 04, 2006
Author Information / Description
Troya is a WebRAT (Web Remote Access Tool)
It uses Internet Explorer to connect to Remote PC.
For Example: http://217.218.10.16/
Coded by: Borland Delphi 6.0
Released in: Dec. 2005
Mohammad
If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.