Packed MD5 ca15c09536fc96ba9b8fc94dd9313a0f 
Priority 59 
First 06/27/2008 
Last 07/02/2008 
Count 181 
History 181 hits: 06-27 to 07-02 
Unpacked MD5  
AV Hits 26 
AV Count 32 
CC Servers 69.247.147.113:12351 69.247.147.113:13001 
DNS Lookups US:chat-shqip.org US:w3bs.chat-shqip.org 
Failed Connects US:69.247.147.113:12351 US:69.247.147.113:13001 
AV Name AhnLab-V3:IRCBot.variant, AntiVir:WootBot.85322, Authentium:Backdoor2.BHJW, Avast:MISSED, AVG:Agobot.GPG, BitDefender:Wootbot.ABQ, CAT-QuickHeal:Wootbot.gen, ClamAV:MISSED, DrWeb:Packed.494, eSafe:MISSED, eTrust-Vet:ForBot.WA, Ewido:Wootbot, FileAdvisor:MISSED, Fortinet:Generic.A!tr.bdr, F-Prot:Backdoor2.BHJW, F-Secure:Wootbot.gen, Ikarus:Virut.n, Kaspersky:Wootbot.gen, McAfee:MISSED, Microsoft:Wootbot, NOD32v2:MISSED, Norman:MISSED, Panda:MISSED, Prevx1:MISSED, Rising:MISSED, Sophos:MalGeneric-A, Sunbelt:Wootbot.gen, Symantec:MISSED, TheHacker:BackdoorWootbot.gen, VBA32:Wootbot.gen, VirusBuster:Wootbot.YZ, Webwasher-Gateway:WootBot.85322  
WinXP Files exlorers.exe, c.bat  
WinXP Processes CMD.EXE, CSRSS.EXE, exlorers.exe, EXPLORER.EXE, LSASS.EXE, MSMSGS.EXE, SERVICES.EXE, SPOOLSV.EXE, SVCHOST.EXE, WINLOGON.EXE, defrag.exe, DfrgFat.exe, ftp.exe  
WinXP Registries HKEY_LOCAL_MACHINE@...CurrentVersion\\RunServices, HKEY_USERS@...CurrentVersion\\RunOnce  
WinXP Ports 1040, 12045, 12808, 14021, 1042, 14011, 1039, 8123, 1044, 11256, 13667, 15758, 1041, 11114, 7250, 1035, 1137, 1360, 1545, 15563, 1601, 1633, 2048, 2648, 2804, 3124, 3135, 3172, 3839, 3850, 4080, 4098, 4109, 4732, 4733, 4734, 4735, 4736, 4737, 4738, 4739, 4740, 4741, 4742, 4743, 4744, 4745, 4746, 4747, 4748, 4749, 4750, 4751, 4752, 4753, 4754, 4755, 4756, 4757, 4758, 4759, 4760, 4761, 4762, 4763, 4764, 4765, 4766, 4767, 4768, 4769, 4770, 4771, 4772, 4773, 4774, 4775, 4776, 4777, 4778, 4779, 15118, 1034, 1182, 1302, 1337, 1512, 1574, 1646, 1693, 1694, 1695, 1696, 1697, 1698, 1699, 1700, 1701, 1702, 1703, 1704, 1705, 1706, 1707, 1708, 1709, 1710, 1711, 1712, 1713, 1714, 1715, 1716, 1717, 1718, 1719, 1720, 1721, 1722, 1723, 1724, 1725, 1726, 1727, 1728, 1729, 1730, 1731, 1732, 1733, 1734, 1735, 1736, 1737, 1738, 1739, 1740, 1741, 1742, 1743, 1744, 1745, 1746, 1747, 1748, 1749, 1750, 1751, 1752, 1753, 1754, 1755, 1756, 1757, 1758, 1759, 1760, 1761, 1762, 1763, 1764, 1765, 1766, 1767, 1768, 1769, 1770, 1771, 1772, 1773, 1774, 1775, 1776, 1777, 1778, 1779, 1780, 1781, 1782, 1783, 1784, 1785, 1786, 1787, 1788, 1789, 1790, 1791, 1792, 1793, 1794, 1795, 1796, 1797, 1798, 1799, 1800, 1801, 1802, 1803, 1804, 1805, 1806, 1807, 1808, 1809, 1810, 1811, 1812, 1813, 1814, 1815, 1816, 1817, 1818, 1819, 1820, 1821, 1822, 1823, 1824, 1825, 1826, 1827, 1828, 1829, 1830, 1831, 1832, 1833, 1834, 1835, 1836, 1837, 1838, 1839, 1840, 1841, 1842, 1843, 1844, 1845, 19277, 2070, 2091, 2096, 2299, 2551, 2647, 2941, 2971, 3048, 3066, 3219, 3378, 3768, 3794, 4044, 4058, 4259, 4269, 16668, 21380, 11905, 1497, 5320, 20493, 20523, 15185, 2691, 1029, 10609, 1096, 1447, 1457, 1537, 1548, 1950, 2051, 2075, 2146, 2228, 2232, 2233, 2234, 2235, 2236, 2237, 2238, 2239, 2240, 2241, 2242, 2243, 2244, 2245, 2246, 2247, 2248, 2249, 2250, 2251, 2252, 2253, 2254, 2255, 2256, 2257, 2258, 2259, 2260, 2261, 2262, 2263, 2264, 2265, 2266, 2267, 2268, 2269, 2270, 2271, 2272, 2273, 2274, 2275, 2276, 2277, 2278, 2279, 2280, 2281, 2282, 2283, 2284, 2285, 2286, 2287, 2288, 2289, 2290, 2291, 2292, 2293, 2294, 2295, 2296, 2297, 2298, 2300, 2301, 2302, 2303, 2304, 2305, 2306, 2307, 2308, 2309, 2310, 2311, 2312, 2313, 2314, 2315, 2316, 2317, 2318, 2319, 2320, 2321, 2322, 2323, 2502, 2824, 3306, 4146, 4165, 4367, 4372, 4694, 4706, 4966, 17882, 21024, 1038, 7842, 8098, 16278, 12728, 3817, 1036, 1063, 1266, 1331, 1342, 1517, 1542, 1544, 1566, 1613, 19626, 2156, 2168, 2191, 2417, 2425, 2482, 2489, 2588, 2861, 2862, 2863, 2864, 2865, 2866, 2867, 2868, 2869, 2870, 2871, 2872, 2873, 2874, 2875, 2876, 2877, 2878, 2879, 2880, 2881, 2882, 2883, 2884, 2885, 2886, 2887, 2888, 2889, 2890, 2891, 2892, 2893, 2894, 2895, 2896, 2897, 2898, 2899, 2900, 2901, 2902, 2903, 2904, 2905, 2906, 2907, 2908, 2909, 2910, 2911, 2912, 2913, 2914, 2915, 2916, 2917, 2918, 2919, 2920, 2921, 2922, 2923, 2924, 2925, 2926, 2927, 2928, 2929, 2930, 2931, 2932, 2933, 2934, 2935, 2936, 2937, 2938, 2939, 2940, 2942, 2943, 2944, 3128, 3178, 3290, 3730, 3882, 3995, 4208, 4478, 4926, 8353, 20376, 1037, 1183, 2046, 2140, 2222, 2527, 3099, 3111, 3635, 3969, 3981, 4064, 4066, 4406, 4415, 4416, 4428, 445, 4650, 4659, 4677, 4680, 4685, 4780, 4781, 4782, 4783, 4784, 4785, 4786, 4787, 4788, 4789, 4790, 4791, 4792, 4793, 4794, 4795, 4796, 4797, 4798, 4799, 4800, 4801, 4802, 4803, 4804, 4805, 4806, 4807, 4808, 4809, 4810, 4811, 4812, 4813, 4814, 4815, 4816, 4817, 4818, 4819, 4820, 4821, 4822, 4823, 4824, 4825, 4826, 4827, 4828, 4829, 4830, 4831, 4832, 4833, 4834, 4835, 4836, 4837, 4838, 4839, 4840, 4841, 4842, 4843, 4844, 4845, 4846, 4847, 4848, 4849, 4850, 4851, 4852, 4853, 4854, 4855, 4856, 4857, 4858, 4859, 4860, 4861, 4862, 4863, 4864, 4865, 4866, 4867, 4868, 4869, 4870, 4871, 4872, 1120, 1144, 1162, 1222, 1473, 1547, 1641, 1647, 1849, 2114, 2157, 2334, 2348, 2368, 2431, 2644, 2664, 2702, 2743, 2772, 3015, 3060, 3078, 3255, 3262, 3266, 3391, 3402, 3429, 3499, 3510, 3804, 3856, 3862, 4053, 4071, 4074, 4076, 4102, 4150, 4179, 4254, 4289, 4294, 4340, 4344, 4396, 4405, 4582, 4583, 4584, 4585, 4586, 4587, 4588, 4589, 4590, 4591, 4592, 4593, 4594, 4595, 4596, 4597, 4598, 4599, 4600, 4601, 4602, 4603, 4604, 4605, 4606, 4607, 4608, 4609, 4610, 4611, 4612, 4613, 4614, 4615, 4616, 4617, 4618, 4619, 4620, 4621, 4622, 4623, 4624, 4625, 4626, 4627, 4628, 4629, 4630, 4631, 4632, 4633, 4634, 4635, 4636, 4637, 4638, 4639, 4640, 4641, 4642, 4643, 4644, 4645, 4646, 4647, 4648, 4649, 4651, 4652, 4653, 4654, 4655, 4656, 4657, 4658, 4660, 4661, 4662, 4663, 4664, 4665, 4666, 4667, 4989, 1103, 1385, 1423, 1494, 1530, 1611, 1682, 17000, 1851, 1864, 1906, 1924, 1959, 2024, 2177, 2210, 2221, 2383, 2619, 2997, 2998, 3029, 3030, 3115, 3237, 3322, 3325, 3330, 3372, 3374, 3393, 3400, 3406, 3449, 3456, 3478, 3481, 3496, 3548, 3559, 3609, 3696, 3871, 3881, 4012, 4013, 4014, 4015, 4016, 4017, 4018, 4019, 4020, 4022, 4023, 4024, 4025, 4026, 4027, 4028, 4029, 4030, 4031, 4032, 4033, 4034, 4035, 4036, 4037, 4038, 4039, 4040, 4041, 4042, 4043, 4045, 4046, 4047, 4048, 4049, 4050, 4051, 4052, 4054, 4055, 4056, 4057, 4059, 4060, 4061, 4062, 4063, 4065, 4067, 4068, 4069, 4070, 4072, 4073, 4075, 4077, 4078, 4079, 4081, 4082, 4083, 4084, 4085, 4086, 4087, 4088, 4089, 4192, 4196, 4342, 4963, 15600, 9476, 1057, 1279, 1585, 1598, 1998, 20017, 2325, 2372, 2430, 2535, 2586, 2659, 2671, 2734, 2741, 2749, 2752, 2957, 2966, 2970, 3123, 3131, 3166, 3357, 3363, 3412, 3451, 3518, 3529, 3584, 3592, 3702, 3720, 3732, 3866, 3992, 4110, 4111, 4112, 4113, 4114, 4115, 4116, 4117, 4118, 4119, 4120, 4121, 4122, 4123, 4124, 4125, 4126, 4127, 4128, 4129, 4130, 4131, 4132, 4133, 4134, 4135, 4136, 4137, 4138, 4139, 4140, 4142, 4143, 4144, 4145, 4147, 4148, 4149, 4151, 4152, 4153, 4154, 4155, 4156, 4157, 4158, 4159, 4160, 4161, 4162, 4163, 4164, 4166, 4167, 4168, 4169, 4170, 4171, 4172, 4173, 4174, 4175, 4176, 4177, 4178, 4180, 15094, 15463, 1201, 1540, 1895, 2582, 2593, 2843, 3303, 3546, 3549, 3857, 3956, 3957, 3959, 4090, 4091, 4092, 4093, 4094, 4095, 4096, 4097, 4099, 4100, 4101, 4103, 4104, 4105, 4106, 4107, 4108, 4141, 7004, 14860, 19764, 13521, 21228, 6162, 3463, 2549, 1043, 7075, 14952, 13417, 13621, 10174, 1113, 1143, 1177, 1409, 1692, 2339, 2375, 2496, 2721, 2782, 2955, 3485, 3591, 3671, 3682, 3853, 3860, 4223, 4261, 4461, 4462, 4463, 4464, 4465, 4466, 4467, 4468, 4469, 4470, 4471, 4472, 4473, 4474, 4475, 4476, 4477, 4479, 4480, 4481, 4482, 4483, 4484, 4485, 4486, 4487, 4488, 4489, 4490, 4491, 4492, 4493, 4494, 4495, 4496, 4497, 4498, 4499, 4500, 4501, 4502, 4503, 4504, 4505, 4506, 4507, 4508, 4509, 4510, 4511, 4512, 4513, 4514, 4515, 4516, 4517, 4518, 4519, 4520, 4521, 4522, 4523, 4524, 4525, 4526, 4527, 4528, 4529, 4530, 4531, 4532, 4533, 4534, 4535, 4536, 4537, 4538, 4539, 4540, 4541, 4542, 4543, 4544, 4545, 4546, 4547, 4548, 1156, 1166, 1441, 1442, 1443, 1444, 1445, 1446, 1448, 1449, 1450, 1451, 1452, 1453, 1454, 1455, 14553, 1456, 1458, 1459, 1460, 1461, 1462, 1463, 1464, 1465, 1466, 1467, 1468, 1469, 1470, 1471, 1472, 1474, 1475, 1476, 1477, 1478, 1479, 1480, 1481, 1482, 1483, 1484, 1485, 1487, 1488, 1489, 1490, 1491, 1492, 1493, 1496, 1498, 1499, 1500, 1501, 1502, 1503, 1504, 1505, 1621, 2519, 2740, 3181, 3753, 3763, 14682, 1169, 1202, 1241, 1270, 1273, 1287, 1336, 1354, 1433, 1438, 1567, 1571, 1629, 1676, 1986, 2097, 2098, 2099, 2100, 2101, 2103, 2104, 2105, 2106, 2107, 2108, 2109, 2110, 2111, 2112, 2113, 2115, 2116, 2117, 2118, 2119, 2120, 2121, 2123, 2124, 2125, 2126, 2127, 2128, 2129, 2130, 2131, 2132, 2133, 2134, 2135, 2136, 2137, 2139, 2141, 2142, 2143, 2144, 2145, 2147, 2148, 2149, 2150, 2151, 2152, 2153, 2154, 2155, 2158, 2159, 2160, 2161, 2162, 2163, 2164, 2165, 2166, 2167, 2169, 2170, 2171, 2172, 2173, 2174, 2175, 2176, 2178, 2179, 2180, 2181, 2182, 2183, 2651, 2681, 3031, 3142, 3334, 3553, 3579, 3594, 3735, 3795, 3963, 4311, 4725, 4958, 9040, 11922, 8440, 3466, 19816, 1046, 21787, 19644, 16197  
Win-2Kf Files  
Win-2Kf Processes  
Win-2Kf Registries  
Win-2Kf Ports 12045, 445, 12000  
Create Events  
Create Files  
Create RegKeys  
Open RegKeys  
Service Starts  
Service Deletes  
Service Creates  
Cluster  
Cluster Confidence  
Packer ID1 none 
Packer ID2 none 
Embedded DNS  
String Count  
String Link text
String MD5  
Timerange 365 Days 
Unpack Status unknown () 
Countries 17 
Unpacked Link none[none
Callgraph none:none 
API Resolution  
Comment none