Backdoor Andromeda – svchost.exe – 4e577785ac428575faef15a53e09525b

Backdoor Andromeda
Also known as: Trojan Generic, Trojan Shiz
SHA256: b42fbebe3dce1a1c25814b453afe16beffc563d76933949624f3195c9a7ae4f1
SHA1: 36b4d078319c465d528095a52885379b129745da
MD5: 4e577785ac428575faef15a53e09525b
File size: 65536 bytes

Created files:

%AllUsersProfile%\svchost.exe – Backdoor Andromeda

Backdoor Andromeda created autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\SunJavaUpdateSched: %AllUsersProfile%\svchost.exe