MoonPie 1.3
(Backdoor.Win32.MoonPie.13)

by Simon Moon

Written in Delphi

Made in Germany

more versions


Server:
dropped file:
C:\WINDOWS\system\winsys.exe 

size: 251 KB

port: 25982, 25686, 27160 TCP

startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run "WinSys" 

MegaSecurity