HKTL_NTCMD

 Analysis by: Francis Xavier Antazo

 ALIASES:

Hacktool.Scan (Symantec); Tool-NtCmd (McAfee);

 PLATFORM:

Windows

 OVERALL RISK RATING:
 DAMAGE POTENTIAL:
 DISTRIBUTION POTENTIAL:
 REPORTED INFECTION:
 INFORMATION EXPOSURE:

  • Threat Type: Hacking Tool

  • Destructiveness: No

  • Encrypted:

  • In the wild: Yes

  OVERVIEW


This hacking tool may arrive bundled with malware packages as a malware component. It arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites. It may be manually installed by a user.

  TECHNICAL DETAILS

File Size:

3584 bytes

File Type:

EXE

Memory Resident:

Yes

Initial Samples Received Date:

28 Jan 2011

Arrival Details

This hacking tool may arrive bundled with malware packages as a malware component.

It arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

It may be manually installed by a user.

Other Details

This hacking tool requires the following additional components to properly run:

  • PipeCmd.exe

NOTES:

This file accepts the following parameters in order to properly execute:

  • {target IP} {username} {password}