Snow 3.8
Released 20 years, 5 months ago. April 2004
Copyright © MegaSecurity
By ?
Informations
| From | China |
| Author | ? |
| Family | Snow |
| Category | Remote Access |
| Version | Snow 3.8 |
| Released Date | Apr 2004, 20 years, 5 months ago. |
| Language | Delphi |
Additional Information
Server:
port: 5328 TCP
dropped files:
c:\WINDOWS\SYSTEM\iplog.dll size: 657.408 bytes
c:\WINDOWS\SYSTEM\ipsnow.exe size: 331.328 bytes
c:\WINDOWS\SYSTEM\Tsnow.dll size: 657.408 bytes
registry added:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\WinOlaApp "Disable"
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Network\LanMan\C$ "Flags"
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Network\LanMan\C$ "Path"
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Network\LanMan\C$ "Type"
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "ipsnow"If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.