.: blackRat :.

Released 17 years, 10 months ago. Oct 2004

By neonew

::actions

I feel lucky I feel lucky (with image)

Additional Details

Coded by: neonew
Version: blackRat
Released date: Oct 2004, 17 years, 10 months ago.
Family: blackRat
Category: Remote Access

MegaSecurity Notes

Server
Dropped File:
c:\WINDOWS\system32.exe
Size: 16,348 bytes 

Startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "IEExtension"
Data: C:\WINDOWS\system32.exe 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "IEExtension"
Data: C:\WINDOWS\system32.exe 



Tested on Windows XP
May 27, 2008

URL's and mails were automatically redacted (filtered) for reader's safety. However the filter is not perfect and can't find all harmful elements. If you find something dangerous including file link, website, mail address, profanity... contact me immediately at sub7crew@protonmail.com, thank you in advance.