PocketRAT 1.0
(Backdoor.Win32.Agent.dup)
(Backdoor.Win32.Agent.dts for Server)

by CrAcker

Written in C, Source included

Released in January 2008






Server
Dropped File:
c:\WINDOWS\system32\svice.exe
Size: 473,775 bytes 

Startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Windows Service"
Data: (data too large: 259 bytes) 




Tested on Windows XP
January 04, 2008

MegaSecurity