TinyRAT 1.0.0.0
(Trojan-Downloader.Win32.Agent.bpb)
(Constructor.Win32.Agent.bl)

by Anskya

Released in December 2006

more versions


Server:
dropped file:
c:\WINDOWS\system32\SysAdsnwt.dll
size: 18,944 bytes 

added to registry:
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_BITS\0000\Control
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\BITS
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BITS\



tested on Windows XP
February 22, 2007

MegaSecurity