SM-PS

Copyright © MegaSecurity

By Mohammad Mansouri


SM-PS
Informations
From Iran
Author Mohammad Mansouri
Family SM-PS
Category Information Stealer
Version SM-PS
Language Visual Basic
Additional Information
Server
Dropped File:
c:\WINDOWS\system32\soundman.exe
Size: 61,179 bytes 

Startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "SOUNDMAN"
Data: C:\WINDOWS\system32\soundman.exe -s 



Tested on Windows XP
September 11, 2008

If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.