DarkstRat 2008 1.9
(Trojan-GameThief.Win32.OnLineGames.tdhp for Client)
(Trojan-GameThief.Win32.OnLineGames.stml for Server)
(Trojan-GameThief.Win32.OnLineGames.taww for System64.dll)

by ?

Written in Delphi

Released in September 2008

Made in China

more versions

 


Server
Dropped Files:
c:\WINDOWS\system32\System64.dat    Size: 146 bytes 
c:\WINDOWS\system32\System64.dll    Size: 365,056 bytes 


Added to Registry:
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\DarkstSer "ImagePath"
Data: %SystemRoot%\system32\svchost.exe -k netservice 
	
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\DarkstSer\Parameters "ServiceDll"
Data: C:\WINDOWS\system32\System64.dll 
	
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DarkstSer\Parameters "ServiceDll"
Data: C:\WINDOWS\system32\System64.dll 

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DarkstSer "ImagePath"
Data: %SystemRoot%\system32\svchost.exe -k netservice 


Tested on Windows XP
2008, September 03, 2008

MegaSecurity