Backdoor IRCBot – Ocgugi.exe – 1b87c43342272a9fa89348ae867fccf0

Backdoor IRCBot
Also known as: Trojan CI, Worm Ngrbot
SHA256: bdc1ecbe813a2f10d42f4c1d3d36ff70aa0de50924b4fa5e5d7718490e047b41
SHA1: 3669c7796388baa6d644df3ba262a0b71e5d7184
MD5: 1b87c43342272a9fa89348ae867fccf0
File size: 204800 bytes

Created files:

%AppData%\Ocgugi.exe – Backdoor IRCBot

Backdoor IRCBot created autostart registry keys:

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Ocgugi: %AppData%\Ocgugi.exe