Ketch (k)
(Backdoor.Win32.Ketch.k)

by I.R.W.W.

Written in Microsoft Visual C++, compressed with UPX

more versions




size: 104,448 bytes

added to registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "sysmon"
data: C:\WINDOWS\System32\sysmon34.exe 

HKEY_LOCAL_MACHINE\SOFTWARE\sysmon



tested on Windows XP
April 24, 2005

MegaSecurity