Event ID - 2716

Port No2716
Service NameThe Prayer
RFC Doc0
ProtocolTCP
DescriptionWorks on Windows.
Reference LinkThe_Prayer
AttackRegisters:
HLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Files:
Prayer.zip - 256,349 bytes Prayer.zip - 806,956 bytes ThePrayer1.0.zip - 208,450 vytes ThePrayer1.2.zip - 256,553 bytes ThePrayer1.3.zip - 255,994 bytes ThePrayer1.5.zip - 526,730 bytes Prayer.exe - 240,897 bytes Prayer.exe - 423,936 bytes Prayer13.exe - 418,304 bytes Server.exe - 206,336 bytes Server.exe - 226,304 bytes Ps.exe - 160,982 bytes Mswinsck.ocx - 62,540 bytes Tabctl32.ocx - 118,781 bytes Winsck.ocx - 106,768 bytes Winsck.ocx - 126,976 bytes Msinet.ocx - 64,567 bytes Setup.exe - 89,600 bytes Setup1.exe - 73,501 bytes Prayer.mid- 22,557 bytes St5unst.exe - 38,692 bytes Vb5stkit.dll - 16,457 bytes Dlls32.exe - - 208,869 bytes

Requires:
Winsck.ocx - is required to run the trojan

Actions:
Remote Access

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.