Compressed with UPX

Released on December 2001

Made in China

more versions

Wollf 1.2:

port: 7614 TCP

dropped file:
c:\WINNT\system32\wrm.exe   size: 41.984 bytes
 
added to registry:
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_WRM\0000\Control
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WRM\Enum
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WRM\Security
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_WRM\0000\Control
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WRM\Enum
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WRM\Security

fast closing DOS-box is visible on execution