.: Caznova Key 1.2 Http :.

Released 19 years, 1 month ago. May 2003

By rattajin

::actions

I feel lucky I feel lucky (with image)

Additional Details

Coded by: rattajin
Version: Caznova Key 1.2 Http
Released date: May 2003, 19 years, 1 month ago.
Coded in: Visual Basic
Family: Caznova
Category: Information Stealer

MegaSecurity Notes

Server:
dropped file:
c:\WINDOWS\SYSTEM\MSHTTPC.EXE 
 
size: 53.248 bytes 

port: 80 TCP

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices "MsHttpC" 

dropped files:
c:\WINDOWS\SYSTEM\MSHTTPC.EXE 
c:\WINDOWS\SYSTEM32\MsCaz.dll

URL's and mails were automatically redacted (filtered) for reader's safety. However the filter is not perfect and can't find all harmful elements. If you find something dangerous including file link, website, mail address, profanity... contact me immediately at sub7crew@protonmail.com, thank you in advance.