Hackarmy (m)
(Backdoor.Win32.Hackarmy.m)

by ?

Written in C, compressed with PECompact

Released in May 2004

more versions


dropped file:
c:\WINDOWS\SYSTEM\win32server.exe 

size: 15.872 bytes

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Winsock32driver"

The dropper itself does melt
original file name: bra_shots.scr

MegaSecurity