Clandestine 2.0
(TrojanDropper.Win32.Small.f for Server)

by Exhumed

Compressed with ASPack

Released in December 2001

more versions 


Server:
dropped files:
C:\WINDOWS\SYSTEM\REMOTO.EXE
C:\WINDOWS\SYSTEM\WIN32.EXE

size: 123.684 bytes

port: 23456 TCP

startup:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run


MegaSecurity