MoneyRat 1.2
(Backdoor.Win32.VB.iho)


by zetra

Written in Visual Basic

Released in December 2008





Server
Dropped File:
c:\WINDOWS\apph.exe
Size: 241,664 bytes 

Added to Registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "RUNDLL32"
Data: c:\windows\apph 
	
	
Tested on Windows XP
January 01, 2009

MegaSecurity