From the doc: 'subroot is a telnet RAT (remote administration tool) that was written and tested in the republic of south africa. the server listens for connections on port 7410 and runs on any windows platform. note: connect to server with above details -> buffer size of client must = 25 -> use vt100 / ANSI emulation -> local echo must be off only one connection per IP address no backspacing allowed in console all commands are in lower casecommand list and usage:dir - gives a directory listingkill or - kills a specified file or empty directoryrun - runs a specified fileread - reads a specified filelistfree - lists a specified drives free spaceshell - shells a specified URL addressopencd - opens cdromclosecd - close cdromswapmouse - swaps mouse buttons aroundswapmouseback - swaps mouse buttons backbeep - makes pc speaker beepbeepoff - stops pc speaker beepinghidestartbutton - hides start buttonshowstartbutton - shows start buttonhidetaskbar - hides task barshowtaskbar - shows task barstartcolor - cycles through windows coloursstopcolor - stops cycling coloursdisablecad - disables ctrl-alt-delteenablecad - enables ctrl-alt-deleteinfo - displays information about serverclients - lists number of clients connected to serversendmsg - sends popup messagebluescreen - sends bluescreenduser - damages boot recordssystemkill - damages boot records, then sends bluescreenreboot - reboots remote computeruserlogout - logs the remote user outshutdown - shutsdown remote computerclose - closes subroot serverdisconnect - disconnects from subroot servercls - clears buffershoutz: M R glitch phondir nokie overload silentbob m4d merlion vektor no1 gov boi gobo (freegobo.com)-cloak
Backdoor.Subroot.10Backdoor.Subroot.11Backdoor.Subroot.13
client.execonsole.exenavw32.exe