.: CommInet (p) :.

By ?

Additional Details

  • Coded by: ?
  • Version: CommInet (p)
  • Family: CommInet
  • Category: Remote Access

MegaSecurity Notes

dropped file:
c:\WINDOWS\hostdll.exe
size: 13,828 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "hostdll.exe"
data: C:\WINDOWS\hostdll.exe 

MD5: 1532c7bf7f71c4fc314f5a4df098eb68

attempts to connect to an IP located in Argentina

the text string "INETCOMM Server Passwords" can be found in the executable



tested on Windows XP
May 03, 2005

URL's and mails were automatically redacted (filtered) for reader's safety. However the filter is not perfect and can't find all harmful elements. If you find something dangerous including file link, website, mail address, profanity... contact me immediately at sub7crew@protonmail.com, thank you in advance.