Autocrat (a)
Released 23 years ago. October 2002
Copyright © MegaSecurity
Informations
| Family | Autocrat |
| Category | Remote Access |
| Version | Autocrat (a) |
| Released Date | Oct 2002, 23 years ago. |
| Language | Visual Basic |
Additional Information
Backdoor.Autocrat.a:
port: 8535 TCP
dropped files:
c:\WINDOWS\SYSTEM\Cp_1253.nxs size: 134 bytes
c:\WINDOWS\SYSTEM\rundl132.exe size: 10.240 bytes
c:\WINDOWS\SYSTEM\wupdmgr32.exe size: 117.760 bytes
startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Rundll32"
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices "Microsoft Windows Update Service"
KEY_CLASSES_ROOT\batfile\shell\open\command "(Default)"
HKEY_CLASSES_ROOT\comfile\shell\open\command "(Default)"
HKEY_CLASSES_ROOT\exefile\shell\open\command "(Default)"
HKEY_CLASSES_ROOT\scrfile\shell\open\command "(Default)"
registry added:
HKEY_LOCAL_MACHINE\System\ControlSet001\Services\MSUpdate\Enum
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSUpdate\EnumIf you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.