Scene Archive Meteor Irc Bot 3.50

.: Meteor Irc Bot 3.50 :.

By lovesick

::actions

I feel lucky I feel lucky (with image)

Additional Details

Coded by: lovesick
Version: Meteor Irc Bot 3.50
Coded in: C, compressed with UPX
Family: Meteor Irc Bot
Category: Remote Access

MegaSecurity Notes

dropped file:
c:\WINDOWS\system32\Exp1orer.exe
size: 47,336 bytes 

port: 113 TCP

added to registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MeteorBot "Dofiibk"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MeteorBot "DofiibkWftt"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MeteorBot "NUDTbuqbu"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MeteorBot "NUDWhus" 

attempts to connect to an IRC Server



tested on Windows XP
April 04, 2005

URL's and mails were automatically redacted (filtered) for reader's safety. However the filter is not perfect and can't find all harmful elements. If you find something dangerous including file link, website, mail address, profanity... contact me immediately at sub7crew@protonmail.com, thank you in advance.