.: Almq :.

Released 17 years, 6 months ago. Apr 2004

By [A]rab[E]vil[S]oftware

::actions

I feel lucky I feel lucky (with image)

Additional Details

From: the Middle East
Coded by: [A]rab[E]vil[S]oftware
Version: Almq
Released date: Apr 2004, 17 years, 6 months ago.
Coded in: Delphi
Family: Almq
Category: Remote Access

MegaSecurity Notes

Server:
dropped file:
c:\WINNT\system32\Server.exe

size: 34.820bytes
 
port: 36362 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Registry"
data: C:\WINNT\system32\Server.exe

tested on Win2000

URL's and mails were automatically redacted (filtered) for reader's safety. However the filter is not perfect and can't find all harmful elements. If you find something dangerous including file link, website, mail address, profanity... contact me immediately at sub7crew@protonmail.com, thank you in advance.