CFour
Copyright © MegaSecurity
By ?
Informations
| From | Visual Basic |
| Author | ? |
| Family | CFour |
| Category | Remote Access |
| Version | CFour |
Additional Information
Dropped file:
C:\WINDOWS\SYSTEM\C4.EXE
size: 104 KB
startup:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run "Gpkvlhqwj"
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "Hdhwpdpzyt"
HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices "Efzpgin"
HKCU\Software\Mirabilis\ICQ\Agent\AppsIf you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.