Backdoor Zegost – (null)0.exe – 0ea43f17171bdb40b57a5e6114bd36e6

Backdoor Zegost
Also known as: Trojan Agent, Trojan Generic
SHA256: 71b940493799471b198b45e955879e5696102c7e7c40b9a2e316e724bb7c747c
SHA1: 0c96f835afadaed38aeffdd0c991625b6230902f
MD5: 0ea43f17171bdb40b57a5e6114bd36e6
File size: 285700 bytes

Created files:

C:\Windows\(null)0.exe – Backdoor Zegost
C:\Windows\BJ.exe – Backdoor Zegost

Backdoor Zegost created autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Kris: 0EA43F17171BDB40B57A5E6114BD36E6.EXE