Written in Delphi

Server compressed with UPX

more versions

Server:
dropped file:
C:\WINDOWS\Winahlp.exe

size: 146 KB

port: 6969 TCP

startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run