.: ARAB RAT 1.0 :.

Additional Details

• Coded by: QwEErz
• Version: ARAB RAT 1.0
• Released date: Mar 2006, 15 years, 8 months ago.
• Coded in: Visual Basic
• Family: ARAB RAT 1.0
• Category: Remote Access

MegaSecurity Notes

Server:
dropped files:
c:\WINDOWS\arar.exe                 Size: 139,264 bytes 
c:\WINDOWS\system32\Aroot.exe       Size: 71,292 bytes 
c:\WINDOWS\system32\explorer.dll    Size: 88,576 bytes 
c:\WINDOWS\system32\iexplore.dll    Size: 82,944 bytes 
c:\WINDOWS\system32\jpg.dll         Size: 53,248 bytes 
c:\WINDOWS\system32\Kernel.bat      Size: 7,552 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Aroot.exe"
data: C:\WINDOWS\System32\Aroot.exe 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Windows Logon Application"
data: C:\WINDOWS\Csrss.exe 
	
	

tested on Windows XP
December 07, 2006