.: Glacier 5.5b server :.

Released 20 years, 4 months ago. Jun 2001

By Y2KZERO

Additional Details

  • From: China
  • Coded by: Y2KZERO
  • Version: Glacier 5.5b server
  • Released date: Jun 2001, 20 years, 4 months ago.
  • Coded in: Delphi
  • Family: Glacier
  • Category: Remote Access

MegaSecurity Notes

Server:
dropped files:
c:\WINDOWS\SYSTEM\lfp.exe 
c:\WINDOWS\SYSTEM\system32.exe 
c:\WINDOWS\SYSTEM\tel.dll 
c:\WINDOWS\SYSTEM\lfp.dll 

port: 7626 TCP

startup:
HKEY_CLASSES_ROOT\*\Shell\open\command "(Default)" 

registry added:
HKEY_CLASSES_ROOT\*\Shell\open\command 
HKEY_CLASSES_ROOT\.lfp 
HKEY_CLASSES_ROOT\dllfile\shell\Open\Command 
HKEY_CLASSES_ROOT\lfpfile\DefaultIcon 
HKEY_CLASSES_ROOT\lfpfile\shell\Open\Command 
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\durrentVersion

URL's and mails were automatically redacted (filtered) for reader's safety. However the filter is not perfect and can't find all harmful elements. If you find something dangerous including file link, website, mail address, profanity... contact me immediately at sub7crew@protonmail.com, thank you in advance.