.: FKWP 2.0 :.
By b1ackh0le
::actions
Additional Details
- Coded by: b1ackh0le
- Version: FKWP 2.0
- Family: FKWP
- Category: Information Stealer
MegaSecurity Notes
Server: dropped files: c:\WINNT\regof1.dll size: 0 bytes c:\WINNT\regof2.dll size: 0 bytes c:\WINNT\system32\msvchost.exe size: 13.996 bytes c:\WINNT\system32\regm64.dll size: 12.800 bytes c:\WINNT\system32\ssvchost.exe size: 13.996 bytes port: 31337 TCP startup: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{KLOPFR-RTYGTYUH6-9TYUIOH} "StubPath" data: C:\WINNT\system32\ssvchost.exe tested on win2000
URL's and mails were automatically redacted (filtered) for reader's safety. However the filter is not perfect and can't find all harmful elements. If you find something dangerous including file link, website, mail address, profanity... contact me immediately at sub7crew@protonmail.com, thank you in advance.