.: Meteor Irc Bot 3.50 :.
By lovesick
::actions
Additional Details
- Coded by: lovesick
- Version: Meteor Irc Bot 3.50
- Coded in: C, compressed with UPX
- Family: Meteor Irc Bot
- Category: Remote Access
MegaSecurity Notes
dropped file: c:\WINDOWS\system32\Exp1orer.exe size: 47,336 bytes port: 113 TCP added to registry: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MeteorBot "Dofiibk" HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MeteorBot "DofiibkWftt" HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MeteorBot "NUDTbuqbu" HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MeteorBot "NUDWhus" attempts to connect to an IRC Server tested on Windows XP April 04, 2005
URL's and mails were automatically redacted (filtered) for reader's safety. However the filter is not perfect and can't find all harmful elements. If you find something dangerous including file link, website, mail address, profanity... contact me immediately at sub7crew@protonmail.com, thank you in advance.