.: Beast 1.8 (November 13, 2002) :.

Additional Details

• Coded by: Tataye
• Version: Beast 1.8 (November 13, 2002)
• Family: Beast
• Category: Remote Access

MegaSecurity Notes

Client:
size: 640.512 bytes



Server:
dropped files:
c:\WINDOWS\system32\kb.tlg         size: 292 bytes 
c:\WINDOWS\system32\mshost.exe     size: 197.672 bytes 
c:\WINDOWS\system32\shell32.com    size: 197.672 bytes 
c:\WINDOWS\system32\Com\comsv.com  size: 197.672 bytes 

port: 666 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{AS096941-B967-10D8-9CBD-1671028A369E} "StubPath"
data: C:\WINDOWS\System32\Com\comsv.com 
	
HKEY_CLASSES_ROOT\exefile\shell\open\command "(Default)"
old data: "%1" %* 
new data: shell32.com "%1" %* 


tested on Windows XP
December 27, 2004