Home Malware Programs Remote Administration Tools DarkFace

DarkFace

Posted: March 28, 2006

This RAT is a clone application ofanother hacker tool called MoonPie

File System Modifications

  • The following files were created in the system:
    # File Name
    1 [system
    2 darkface.exe
    3 darkfaceportscanner.exe
    4 darkserver.exe
    5 edtsrv.exe
    6 mshtml.exe
    7 readme.txt

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{RegistryKeys}HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionunmshtml

Related Posts

Loading...