Little Witch


Name: Little Witch
Aliases: Backdoor.LittleWitch, Little Bitch, LW,
Ports: 1031, 1033 , 6711, 31320, 31320 (UDP), 31339, 31339 (UDP), 31340, 31340 (UDP), 45632
Files: Littlewitch4.0.b.zip - 698,456 bytes Littlewitch4.0.zip - 680,253 bytes Littlewitch4.1.zip - 880,273 bytes Littlewitch4.2.zip - 881,427 bytes Littlewitch4.5.zip - Littlewitch5.0.zip - Littlewitch5.1.zip - 803,789 bytes Littlewitch5.2.zip - 838,507 bytes Littlewitch5.3.zip - 888,327 bytes Lwclient.zip - Lwclient.exe - Lwclient5.1.exe - 586,752 bytes Lwclient5.2.exe - 606,720 bytes Lwclient5.3.exe - 1,191,936 bytes Lwserver.exe - Lwserver_base.exe - Lwserver_full.exe - 273,444 bytes Lwserver_full5.1.exe - 237,056 bytes Lwserver_full5.2.exe - 261,632 bytes Rundll.exe -
Created: May 2001
Requires:
Actions: Remote Access / Steals passwords / FTP server
Registers: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Currentversion\explorer
Notes: Works on Windows.
Country: written in Argentina
Program: Written in Delphi 4.

© Copyright von Braun Consultants. This information may include technical inaccuracies or typographical errors. If you have any questions or further information about the actual trojan above, please contact Joakim von Braun at <joakim.von.braun@risab.se>