Ruler 1.3
(Backdoor.Win32.Ruler.13)
(Backdoor.Win32.Ruler.14)

by PSYcho

Made in Russia

more versions


Server:
dropped file:
C:\WINDOWS\Windll.exe 

size: 369 KB

port: 22222 TCP

startup:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run 

MegaSecurity