Using 25 port instead of 1433

Do you Know if you save any T-SQL commands into file aisTmpData.tmp
then convert it to aisTmpData.att with Rar-archiver and
send as attachment with subject SQL = xxxxxx (where xxxxxx - any digits)
by e-mail to one or more addresses:

ads1update@tupetr.gov.spb.ru
ads2update@tupetr.gov.spb.ru
ais_obmen@tuvyb.gov.spb.ru
aisto@cntr.gov.spb.ru
aisto@socvr.voadm.gov.spb.ru
aisto@tuadm.gov.spb.ru
aisto@tukir.gov.spb.ru
aisto@tukrsl.gov.spb.ru
aisto@tulom.gov.spb.ru
aisto@tupetr.gov.spb.ru
aisto@tuptrdv.gov.spb.ru
aisto@tupush.gov.spb.ru
aisto@voadm.gov.spb.ru
aisto_obmen@spb004.ru
aisto_obmen@tufruns.gov.spb.ru
aisto_obmen@tukalin.gov.spb.ru
aisto_obmen@tukrgv.gov.spb.ru
aisto_obmen@tukrns.gov.spb.ru
aisto_obmen@tukur.gov.spb.ru
aisto_obmen@tumos.gov.spb.ru
aisto_obmen@tunev.gov.spb.ru
aisto_obmen@tuprim.gov.spb.ru
aisto01@tukolp.gov.spb.ru
aisto02@tukolp.gov.spb.ru
idsupdate@tupetr.gov.spb.ru
jks1js2update@tupetr.gov.spb.ru
jks1js3update@tupetr.gov.spb.ru
jks2js1update@tupetr.gov.spb.ru
up_gks1pu2@tumos.gov.spb.ru

they (commands) will be automatically executed on SQL Servers under sysadmin account
and you will receive e-letter with subject RSQL = xxxxxx and attachment filename.att.
This is the results in the form of recordset archived with Rar.

I sent exec master.dbo.sp_helpsrvrolemember and received the real answers.
I think the middle program runs under aisadmin account.
You can try too.
Good luck.

P.S. The received recordsets can be viewed with the small program in VBScript

Dim Names()

Set CN = CreateObject("ADODB.Connection")
Set RS = CreateObject("ADODB.Recordset")

CN.Open "Provider=MSPersist"
RS.Open WScript.Arguments(0), CN

For i = 0 To RS.Fields.Count-1
ReDim Preserve Names(i)
Names(i) = RS.Fields(i).Name
Next

Row = ""
For i = 0 To RS.Fields.Count-1
Row = Row & Names(i) & vbTab
Next
WScript.Echo Row

Do While not RS.EOF
Row = ""
For i = 0 To RS.Fields.Count-1
Row = Row & CStr(RS.Fields (Names(i))) & vbTab
Next
WScript.Echo Row
RS.MoveNext
Loop

RS.close
CN.Close

Set RS = Nothing
Set CN = Nothing

It is either an example script, or an invitation to start phishing.