Backdoor Zegost – (null)0.exe – 012ec4f1b6a67c7369f915e82b110e5a

Backdoor Zegost
Also known as: Trojan Agent, Trojan Eldorado
SHA256: dadf48281ca6567f35305469c2a81ef7ece8c62c7990e5fcfe19cb9ea1505471
SHA1: 776dd91ae4c35084497d90778d9379f356a02cf6
MD5: 012ec4f1b6a67c7369f915e82b110e5a
File size: 1041949 bytes

Created files:

C:\Windows\(null)0.exe – Backdoor Zegost
C:\Windows\BJ.exe – Backdoor Zegost

Backdoor Zegost created autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Kris: 012EC4F1B6A67C7369F915E82B110E5A.EXE