.: Dark Moon 1.0 version 2 :.
Released 17 years, 5 months ago. Aug 2004
- Version: Dark Moon 1.0 version 2
- Released date: Aug 2004, 17 years, 5 months ago.
- Coded in: Delphi, compressed with UPX
- Family: Dark Moon
- Category: Remote Access
Client: port: 28888, 80 TCP Server: dropped files: c:\WINDOWS\SYSTEM\SP00LSV.EXE size: 28.160 bytes c:\WINDOWS\SYSTEM\WINL0G0N.EXE size: 28.160 bytes port: 8086, 8087, 25555, 2600, 1027, 23333 TCP startup: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "WINLOGON" data: WINL0G0N.EXE
URL's and mails were automatically redacted (filtered) for reader's safety. However the filter is not perfect and can't find all harmful elements. If you find something dangerous including file link, website, mail address, profanity... contact me immediately at firstname.lastname@example.org, thank you in advance.