Sun Shadow 1.6x

Released 18 years, 11 months ago. December 2005

Copyright © MegaSecurity

By yzkzero


Informations
Author yzkzero
Family Sun Shadow
Category Remote Access
Version Sun Shadow 1.6x
Released Date Dec 2005, 18 years, 11 months ago.
Additional Information
Server:
dropped files:

c:\WINDOWS\MoonShadowHook.dat             Size: 60 bytes 
c:\WINDOWS\system32\MoonShadow.dll        Size: 270,024 bytes 
c:\WINDOWS\system32\MoonShadow.exe        Size: 372,736 bytes 
c:\WINDOWS\system32\MoonShadowHook.dll    Size: 57,344 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell"
old data: Explorer.exe 
new data: Explorer.exe MoonShadow.exe 

tested on Windows XP
January 08, 2005

If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.