Sanya
Released 19 years ago. November 2005
Copyright © MegaSecurity
By ?
Informations
| From | China |
| Author | ? |
| Family | Sanya |
| Category | Remote Access |
| Version | Sanya |
| Released Date | Nov 2005, 19 years ago. |
Additional Information
Server:
dropped files:
c:\WINDOWS\¡¡.exe Size: 764,287 bytes
c:\WINDOWS\smss.exe Size: 764,287 bytes
c:\Documents and Settings\%user%\Local Settings\Temp\E_60003\khk.dll Size: 2,560 bytes
c:\Documents and Settings\$user%\Local Settings\Temp\E_60003\rhmisc.dll Size: 57,344 bytes
added to registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon "Userinit"
old data: C:\WINDOWS\system32\userinit.exe,
new data: C:\WINDOWS\system32\userinit.exe,¡¡,
tested on Windows XP
January 02, 2006If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.