.: A-311 Death 1.20 :.

Released 17 years, 5 months ago. Feb 2004

By Corpse

Additional Details

  • From: Russia
  • Coded by: Corpse
  • Version: A-311 Death 1.20
  • Released date: Feb 2004, 17 years, 5 months ago.
  • Coded in: MASM
  • Family: A-311 Death
  • Category: Remote Access

MegaSecurity Notes

Server:
size: 33.264 bytes

port: 16661 TCP

dropped files:
c:\WINDOWS\SYSTEM\debugg.dll  
c:\WINDOWS\SYSTEM\c3.dll 
c:\WINDOWS\SYSTEM\incoming.a3d 
c:\WINDOWS\SYSTEM\klogini.dll 
c:\WINDOWS\SYSTEM\page2.ini 
c:\WINDOWS\SYSTEM\w32_ss.exe 
c:\WINDOWS\SYSTEM\klog.sys 

registry added:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\MPRServices\TestService 

(tested on win98)

URL's and mails were automatically redacted (filtered) for reader's safety. However the filter is not perfect and can't find all harmful elements. If you find something dangerous including file link, website, mail address, profanity... contact me immediately at sub7crew@protonmail.com, thank you in advance.