Written in Delphi

Released in December 2007

Server
Dropped File:
c:\WINDOWS\system32\Isass.exe
Size: 441,344 bytes 

Port: 666, 6664, 6665 TCP

Startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Isass"
Data: C:\WINDOWS\System32\Isass.exe 




Tested on Windows XP
February 25, 2008