Sacapass

Released 22 years ago. September 2002

Copyright © MegaSecurity

By MalHack


Sacapass
Informations
From Mexico
Author MalHack
Family Sacapass
Category Remote Access
Version Sacapass
Released Date Sep 2002, 22 years ago.
Language Visual Basic
Additional Information
Client:
added to registry:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "MSMSGS"
data: "C:\Program Files\Messenger\msmsgs.exe" /background


 
msn sacapass.exe:
dropped file:
c:\WINDOWS\AD-PI.exe
size: 49.152 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "LoadPowerASPI"
data: c:\winnt\system32\ad-pi.exe

tested on Windows XP
November 10, 2004

If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.