Home Malware Programs Remote Administration Tools Hobbit.416

Hobbit.416

Posted: March 28, 2006

The author of this pest is a hacker called Matt G. / Grifter. The pest
was written in Visual Basic and compressed with UPX. It originated in
March 2002. The prime function of a RAT application is allowing the hacker
to gain unauthorized access to user's PC. The application usually consists
of two parts: the "server" and the "client". The first part embeds
itself in victim's machine, opens a default TCP port 2337 and awaits
commands. The "client" is installed on hacker's PC and allows him to
connect and control the infected PC. This virus creates a "backdoor" in
the security computer of the infected PC, allowing the attacker to
connect completely unnoticed.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 assembler.exe
    2 client.dll
    3 client.exe
    4 gui.dll
    5 gui.exe
    6 stub.exe
Loading...