Snape 1.0
(Backdoor.Win32.Snape.10)
(Backdoor.Win32.Snape.12 for Server)

by Szumi

Released in February 2002

Made in Poland

more versions


Client:
port: 222, 991 TCP

Server:
dropped file:
C:\WINDOWS\winzip_mon.exe 

size: 289 KB

port: 12345, 221, 992 TCP

startup:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run 

MegaSecurity