Sandra (b)

Copyright © MegaSecurity

By ?


Informations
Author ?
Family Sandra
Category Remote Access
Version Sandra (b)
Additional Information
dropped file:
c:\WINDOWS\SYSTEM\q167319.dll
size: 12.288 bytes 

startup:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "mssvc"

attempts to connect to an IRC server

tested on Windows 98
December 12, 2004

If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.