|
|
GirlFriend 1.35 RAT Information
| Name: |
GirlFriend 1.35 |
| Category: |
RAT |
| Alias: |
- Alias: BackDoor-ANW32/LanInfiltrator.C |
| Advice: |
Remove |
| Risk: |
High Risk
High risk threats typically are remotely exploitable vulnerabilities, which can lead to system compromise. Successful exploitation does not normally require any interaction. May open up communication ports, use polymorphic tactics, stealth installations, and/or anti-spy counter measures. May use a security flaw in the operating system to gain access to your computer. |
| Description:
|
Girlfriend is a remote trojan which get connect on the remote machine and navigate according to it's functionality.
Girlfriend is a remote trojan which get connect on the remote machine and navigate according to it's functionality.
|
| Signatures:
|
process: windll.exe: MD5 Hash: db07c4e31d0097a1acc...
process: windll.exe: MD5 Hash: db07c4e31d0097a1acc...
process: GF.exe: MD5 Hash: 47adb08ae65c7479fef...
process: GF.exe: MD5 Hash: 47adb08ae65c7479fef...
process: windll.exe: MD5 Hash: abe7386e163aa26a441...
process: windll.exe: MD5 Hash: abe7386e163aa26a441...
process: TEMP#01.EXE: MD5 Hash: ee71d2165636b5dfc16...
process: TEMP#1.EXE: MD5 Hash: ee71d2165636b5dfc16...
process: TEMP$01.EXE: MD5 Hash: 2d6ad28a4d0da825060...
process: TEMP$1.EXE: MD5 Hash: 2d6ad28a4d0da825060...
process: Windll.exe: MD5 Hash: db07c4e31d0097a1acc.. |
| Type: |
RAT - A Remote Administration Tool (RAT) is a Trojan type of software that when run, provides an attacker with the capability of remotely controlling a user's computer (victim) over the Internet. The attacker usually has full access to functions on the victim's computer. The victim's computer usually listens on the Internet for the attacker's commands. |
Top RAT Visited Pages:
SubSeven - Alias: BackDoor-G22, BackDoor-Sub7 - 292 visits
NetBus v.1.70 - 207 visits
The Prayer - Alias: BackDoor-DI, Backdoor.Prayer.15 - 75 visits
Cyrex msn trojan - Alias: BackDoor-AOB, Backdoor.VB.dm, Backdoor.VB.dm, Cyrex msn trojan, W32/Delf.B - 69 visits
Global Killer - Alias: Backdoor.GlobalKiller 1.0, Global Killer 1.0 - 54 visits
Systray BackDoor - 52 visits
AutoSpY - Alias: Backdoor.AutoSpy - 47 visits
Secret Agent - Alias: Backdoor.Antinuke.10, Secret Agent 1.0 - 46 visits
Undetected - Alias: Backdoor.tds.4f, Backdoor.tds.se.23, Backdoor.tds.se.23a, Backdoor.tds.se.30, Backdoor.TDS.SE.31, Ba - 41 visits
Netbus - Alias: Backdoor.Netbus - 41 visits
Random RAT Pages:
DarkFace - Alias: BackDoor-AED, Backdoor.Antilam.g1, Backdoor.Antilam.g1
Freak - Alias: Backdoor.Freak, DDoS.Win32.Dest, FREAK trojan 2k, Freak88's Distributed Atack Suit (sic)
Last 2000 - Alias: Backdoor.Last2000.a
Izram - Alias: BackDoor-AJL trojan, BackDoor-AJL
Alvgus Trojan 2000 - Alias: Alvgus's Trojan 2000, BackDoor-OS, Backdoor.Alvgus.b
Host Control
Shadow32 - Alias: Backdoor.RCServ.c
Invisible Hunter - Alias: Backdoor.Invisdoor.12, Backdoor.Invisdoor.13
BackWindows
LANfiltrator - Alias: BackDoor-ANW32/LanInfiltrator.C
|
|
