R.A.T. INV4S10N
(Constructor.Win32.BackRAT.a)

by Hacker Share

Released in April 2008

Made in Brazil

more versions




Server
Dropped File:
c:\WINDOWS\system32\Servidor.exe
Size: 388,792 bytes 

Startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Servidor.exe"
Data: C:\WINDOWS\system32\Servidor.exe 



Tested on Windows XP
April 17, 2008
MegaSecurity