FoX RAT 1.0
(Trojan-PSW.Win32.Delf.bgd)

by FoXxD

Released in March 2008





Server
Dropped File:
c:\WINDOWS\system32\FxWin32.exe
Size: 555,655 bytes 

Startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "FxWin32"
Data: C:\WINDOWS\System32\FxWin32.exe 


Tested on Windows XP
March 25, 2008

MegaSecurity