ARAB RAT

Released 18 years, 9 months ago. March 2006

Copyright © MegaSecurity

By QwEErz


ARAB RAT
Informations
Author QwEErz
Family ARAB RAT
Category Remote Access
Version ARAB RAT
Released Date Mar 2006, 18 years, 9 months ago.
Language Visual Basic
Additional Information
Server:
dropped files:
c:\WINDOWS\arar.exe                 Size: 139,264 bytes 
c:\WINDOWS\system32\Aroot.exe       Size: 71,292 bytes 
c:\WINDOWS\system32\explorer.dll    Size: 88,576 bytes 
c:\WINDOWS\system32\iexplore.dll    Size: 82,944 bytes 
c:\WINDOWS\system32\jpg.dll         Size: 53,248 bytes 
c:\WINDOWS\system32\Kernel.bat      Size: 7,552 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Aroot.exe"
data: C:\WINDOWS\System32\Aroot.exe 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Windows Logon Application"
data: C:\WINDOWS\Csrss.exe 
	
	

tested on Windows XP
December 07, 2006

If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.