Sacapass

Released 22 years, 11 months ago. September 2002

Copyright © MegaSecurity

By MalHack


Sacapass
Informations
From Mexico
Author MalHack
Family Sacapass
Category Remote Access
Version Sacapass
Released Date Sep 2002, 22 years, 11 months ago.
Language Visual Basic
Additional Information
Client:
added to registry:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "MSMSGS"
data: "C:\Program Files\Messenger\msmsgs.exe" /background


 
msn sacapass.exe:
dropped file:
c:\WINDOWS\AD-PI.exe
size: 49.152 bytes 

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "LoadPowerASPI"
data: c:\winnt\system32\ad-pi.exe

tested on Windows XP
November 10, 2004


If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.