SoftWAR


Name: SoftWAR
Aliases: Shadow Thief, Softwarst, Softwar ShadowThief,
Ports: 1207 (???)
Files: Softwar.zip - 327,765 bytes Soft-war.zip - 266,469 bytes Softwar.exe - 228,352 bytes Softwarst.exe - 357,738 bytes Trojan.exe - 60,928 bytes Swizard.exe - 79,872 bytes Winserv.exe - Infect1.exe - 16,896 bytes Infect2.exe - 21,504 bytes Sample1.exe - 4,096 bytes Sample2.exe - 8,192 bytes Pkzip.exe - 42,166 bytes Pegraft.exe - 72,192 bytes Mspr.dll - Server - 8,192 bytes Client - 94,720 bytes
Created: Oct 1999
Requires:
Actions: Remote Access / Keylogger
Registers: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\
Notes: Works on Windows 95 and 98. English and French versions. Password =
Country: written in France
Program: Written in Assembler (Win32asm).

© Copyright von Braun Consultants. This information may include technical inaccuracies or typographical errors. If you have any questions or further information about the actual trojan above, please contact Joakim von Braun at <joakim.von.braun@risab.se>