Blackhole 2004 Build 20040712
(Backdoor.Singu.n for client)
(Backdoor.Singu.m for server)

by lovejingtao

Written in Delphi, compressed with UPX

Released in July 2004

Made in China

more versions


Client:
port: 2004 TCP



Server:
dropped files:
c:\WINNT\%server.exe%           size: 198.310 bytes 
c:\WINNT\system32\FinDriv.dll   size: 25.600 bytes 

port: 1144 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

tested on win2000

MegaSecurity