Ysor
Copyright © MegaSecurity
By Sarosoft
Informations
| From | Brazil |
| Author | Sarosoft |
| Family | Ysor |
| Category | Remote Access |
| Version | Ysor |
| Language | Visual Basic, compressed with ASPack |
Additional Information
dropped file:
c:\WINDOWS\system32\tmp.exe
size: 16.950 bytes
port: 8886 TCP
startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Setup"
data: %SysDir%\tmp.exe
tested on Windows XP
January 03, 2005If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.