Bifrost 1.1.03
(Backdoor.Win32.Bifrose.hm for Client)
(Trojan-Downloader.Win32.Agent.elh for Server)

by ksv

Written in Microsoft Visual C++

Released in October 2007

more versions





Server:
Dropped Files;
c:\WINDOWS\System32plugin1.dat    Size: 51,733 bytes 
c:\WINDOWS\system32\server.exe    Size: 91,109 bytes 

Startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "startkey"
Data: C:\WINDOWS\System32\server.exe 




Tested on Windows XP
October 24, 2007

MegaSecurity