DarkFace


Name: DarkFace
Aliases:
Ports: 11831, 29559, 25686, 25982
Files: Mshtml.exe - Lol.exe - Systray.exe.jkl -
Created:
Requires:
Actions: Remote Access / Keylogger
Registers: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices\
HKEY_CLASSES_ROOT\jklfile\shell\open\command
Notes: Works on Windows.
Country: written in Germany
Program: Written in Delphi.

© Copyright von Braun Consultants. This information may include technical inaccuracies or typographical errors. If you have any questions or further information about the actual trojan above, please contact Joakim von Braun at <joakim.von.braun@risab.se>