Y3K_Rat 2k5 RC 1.1

Released 19 years ago. November 2005

Copyright © MegaSecurity

By -/SHA\-


Informations
Author -/SHA\-
Family Y3K_Rat
Category Remote Access
Version Y3K_Rat 2k5 RC 1.1
Released Date Nov 2005, 19 years ago.
Language Delphi
Additional Information
Server:
dropped file:
c:\WINDOWS\system32\wdImgr.exe
size: 797,858 bytes 

port: 9500 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run "SVCHOST"
data: C:\WINDOWS\System32\wdImgr.exe 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "wdImgr.exe"
data: C:\WINDOWS\System32\wdImgr.exe 



tested on Windows XP
December 03, 2005

If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.