Backdoor IRCBot – logon.exe – 0e954871fe6911bfc4047e9e70144697

Backdoor IRCBot
Also known as: Trojan Crypt
SHA256: f3f3dc461693ee698dcf7df4eda73f60e9a210b8b87f9ed5251ce93294ad3e69
SHA1: 48e299eca7c08580297cee20cf321d5addda9c85
MD5: 0e954871fe6911bfc4047e9e70144697
File size: 248832 bytes

Created files:

%SysDir%\logon.exe – Backdoor IRCBot

Backdoor IRCBot created autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Windows Logon Application: %WinDir%\System32\logon.exe