Khe Sanh 2.10 Lite
(Backdoor.Win32.KheSanh.120)

by Zakharov

Released in April 2001

Made in Russia

more versions


Server:
dropped file:
C:\WINDOWS\SYSTEM\KSSRV.EXE 

size: 55.296 bytes

port: 12389 TCP
      12389 UDP 
	  
startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run 

MegaSecurity