Sweet Heart 1.0 (a)
Released 23 years, 5 months ago. April 2001
Copyright © MegaSecurity
By huaxingin & tengzhenin
Informations
| From | China |
| Author | huaxingin & tengzhenin |
| Family | SweetHeart |
| Category | Remote Access |
| Version | Sweet Heart 1.0 (a) |
| Released Date | Apr 2001, 23 years, 5 months ago. |
| Language | Delphi |
Additional Information
Client:
size: 491.520 bytes
port: 2101, 2222 TCP
Servers:
c:\WINDOWS\TEMP\RunDll.exe
c:\WINDOWS\SYSTEM\GIRL.EXE
size: 246.272 bytes
port: 6711, 1133, 1183, 8311 TCP
startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices "(Default)"
HKEY_CLASSES_ROOT\txtfile\shell\open\command "(Default)"
added to registry:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\system "DisableRegistryTools"
added files:
c:\WINDOWS\SYSTEM\WinPlayer.EXE
c:\WINDOWS\SYSTEMdesktop.ini
c:\WINDOWS\TEMP\desktop.ini
c:\WINDOWS\SYSTEMfolder.httIf you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.