Hackarmy (g)
(Backdoor.Win32.Hackarmy.g)

by ?

Packed with MoleBox

Released in December 2003

more versions


Dropped file:
c:\WINDOWS\SYSTEM\win32server.exe 

size: 58.880 bytes

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Winsock32driver" 

remark:
Connects to specified IRC server and joins a channel to listen for commands 

MegaSecurity