Darkmoon 4.00 Final
(Backdoor.Win32.DarkMoon.ab for Server)
(Backdoor.Win32.DarkMoon.40 for Client)

by Shukisnike

Written in Delphi, compressed with UPX

Released in February 2005

more versions 




Server:
dropped files:
c:\WINDOWS\system32\EXPL0RER.EXE   Size: 35,423 bytes 
c:\WINDOWS\system32\SP00LSV.EXE    Size: 35,423 bytes 

port: 800, 25555 TCP




tested on Windows XP
March 02, 2005
MegaSecurity