Sandra (c)

Copyright © MegaSecurity

By ?


Sandra (c)
Informations
Author ?
Family Sandra
Category Remote Access
Version Sandra (c)
Additional Information
dropped files:
c:\Documents and Settings\%user%\Application Data\Microsoft\q167319.dll   (Backdoor.Win32.Sandrador.c)
size: 12,800 bytes 

c:\Documents and Settings\%user%\Application Data\Microsoft\svchost.exe   (Backdoor.Win32.Sandrador.c)
size: 243,200 bytes 

c:\Program Files\TezBEE\license.txt
size: 4,111 bytes 

c:\Program Files\TezBEE\SatelliteResolver.exe                             (Backdoor.Win32.Delf.jf)
size: 723,968 bytes 

c:\Program Files\TezBEE\winsock.dll
size: 2,864 bytes 

c:\WINDOWS\Installer\18100a.msi
size: 309,248 bytes 

c:\WINDOWS\Installer\{DCA3B34A-27E5-4C8E-B174-E19A63032CBD}\PASS.exe
size: 10,134 bytes 



tested on Windows XP
February 16, 2006

If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.