Blue Butterfly

Released 17 years, 9 months ago. December 2006

Copyright © MegaSecurity

By ?


Blue Butterfly
Informations
From China
Author ?
Family Blue Butterfly
Category Remote Access
Version Blue Butterfly
Released Date Dec 2006, 17 years, 9 months ago.
Language Delphi
Additional Information
Server
dropped files:
c:\WINDOWS\system32\xiaozi.exe  Size: 148,992 bytes 
c:\WINDOWS\system32\xiaozig.dll Size: 96,768 bytes 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell"
old data: Explorer.exe 
new data: Explorer.exe C:\WINDOWS\System32\xiaozi.exe 




tested on Windows XP
March 26, 2007

If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.