Event ID - 21554

Port No21554
Service NameSchwindler
RFC Doc0
ProtocolTCP
DescriptionWorks on Windows
Reference LinkSchwindler
AttackRegisters:
HLM\Software\Microsoft\Windows\CurrentVersion\Run

Files:
Schwindler182.zip - Server.exe - 200,704 bytes Client.exe - 272,384 bytes User.exe -

Actions:
Remote Access

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.