.: Almq :.

Released 18 years, 2 months ago. Apr 2004

By [A]rab[E]vil[S]oftware

Additional Details

  • From: the Middle East
  • Coded by: [A]rab[E]vil[S]oftware
  • Version: Almq
  • Released date: Apr 2004, 18 years, 2 months ago.
  • Coded in: Delphi
  • Family: Almq
  • Category: Remote Access

MegaSecurity Notes

Server:
dropped file:
c:\WINNT\system32\Server.exe

size: 34.820bytes
 
port: 36362 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Registry"
data: C:\WINNT\system32\Server.exe

tested on Win2000

URL's and mails were automatically redacted (filtered) for reader's safety. However the filter is not perfect and can't find all harmful elements. If you find something dangerous including file link, website, mail address, profanity... contact me immediately at sub7crew@protonmail.com, thank you in advance.