CmjSpy (q)
Copyright © MegaSecurity
By cmjboy
Informations
| From | China |
| Author | cmjboy |
| Family | CmjSpy |
| Category | Remote Access |
| Version | CmjSpy (q) |
| Language | Delphi, compressed with UPX |
Additional Information
Server:
c:\WINDOWS\SYSTEM\magiclink.exe
size: 302.080 bytes
port: 1982 TCP
startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Magic Link server"
dropped files:
c:\WINDOWS\SYSTEM\magiclink.exe
c:\WINDOWS\SYSTEM\magicset.set
c:\WINDOWS\TEMP\tdllcope.vxdIf you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.