Blackhole ttitan
(Backdoor.Singu.f for client)
(Backdoor.Singu.g for server)

by chengjingtao

Written in Delphi

Released in june 2002

Made in China

more versions


Server:
dropped files:

c:\WINNT\services.exe      size: 218.258 bytes 
c:\WINNT\winservices.dll   size: 146 bytes 

port: 1050, 2002 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "winlogon"
data: C:\WINNT\services.exe

tested on win2000 

MegaSecurity