.: FireFly 1.5 :.
Released 16 years, 6 months ago. Apr 2005By wsdgs
- From: China
- Coded by: wsdgs
- Version: FireFly 1.5
- Released date: Apr 2005, 16 years, 6 months ago.
- Coded in: Delphi, compressed with UPX
- Family: FireFly
- Category: Remote Access
Server: dropped files: c:\WINNT\system32\Intenat.exe Size: 13,355 bytes c:\WINNT\system32\Notepad.txt Size: 13,355 bytes c:\WINNT\system32\Serpent.Exe Size: 256,000 bytes added to registry: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "system" data: Serpent.Exe HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaResources\msvideo HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MediaResources\msvideo tested on Windows 2000 April 18, 2005
URL's and mails were automatically redacted (filtered) for reader's safety. However the filter is not perfect and can't find all harmful elements. If you find something dangerous including file link, website, mail address, profanity... contact me immediately at firstname.lastname@example.org, thank you in advance.