Skun 0.1.5 - Malware Gallery

Informations

Author	inch
Family	Skun
Category	Remote Access
Version	Skun 0.1.5
Released Date	Oct 2002, 21 years, 11 months ago.
Language	Borland C++

Additional Information

Server:
dropped files:
c:\WINDOWS\SYSTEM\tray.wnd 
c:\mIRC\script.ini 
c:\mIRC\strunlog.tmp 

port: 122 TCP
	  
added to registry:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Microsoft Tray Existory" 
c:\windows\win.ini, [windows] "run" 

HKEY_CLASSES_ROOT\.wnd

Author Information / Description

Skun is freeware application. 

_server telnet commands:

parameters (ex. sqn.exe -no_install)

-no_install

-run_after_reboot

 

_server commands:

msg_error <text of error mesage>
msg_warning <text of warning message>
msg_question <text of question message>
msg_info <text of information message>
ls <dir>
cat <file>
rm <file>
exec <file>
cp ($file1 & $file2 must be set)
shellexe <file>
open_cd
close_cd
monitor_off
monitor_on
swap_mouse <true><false>
hang_mouse
exitkernel
disable_keyboard
startbtn <hide><show>
taskbar <hide><show>
passwd
redirect (remote_addr,remote_port,local_port must be set)
set_welcomemsg <welcome message>
set_loging <on><off>
set_passwd <new password>
set_port <port>
set_$file1 <path>
set_$file2 <path>
set_remote_addr <remote address for redirect connection>
set_remote_port <remote port for rediect connection>
set_local_port <local port for redirect connection>
whoami

 

_mIRC commands:

infected_?
givemepasswd
givemeop
changetitle
disconnectnow
showdisk
exitwindows
swapmouse
speaker
quickturnoff
disablemouse
disablekeyboard

inch