Hvl RAT


Name: Hvl RAT
Aliases: Backdoor.HVL-Rat,
Ports: 1092, 1095, 1097, 1098, 1099, 2283
Files: Rat5_3.zip - 366,735 bytes Ratclient5.3.0.zip - 187,854 bytes Ratt.zip - 171,456 bytes Ratt5.3.0.zip - 171,456 bytes Rattpa.zip - Rattpatcher.zip - 7,083 bytes Patcher.exe - 21,504 bytes .exe -Hvlrat client.exe - 168,448 bytes Msgsvr16.exe - Setup.exe - 295,396 bytes Wavestream.dll - 35,328 bytes Regsvr32.exe - 20,480 bytes Mswinsck.ocx - 101,648 bytes Comdlg32.ocx - 128,784 bytes Install.bat - 142 bytes
Created: May 1999
Requires: Mswinsck.ocx and Wavestream.dll - are required to run the trojan.
Actions: Remote Access
Registers: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices\
Notes: Works on Windows 95,98 and NT.
Country:
Program: Written in Visual Basic 5.0.

© Copyright von Braun Consultants. This information may include technical inaccuracies or typographical errors. If you have any questions or further information about the actual trojan above, please contact Joakim von Braun at <joakim.von.braun@risab.se>