Backdoor IRCBot – sttemp-1568573892.bat – 374b42e831b62920d9de38962a32c99e

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

Backdoor IRCBot
Also known as: Trojan Downloader.Generic
SHA256: c19614063a92b6e1b353a009fb7e55cb599e0e3d670370545721f046db5ffe73
SHA1: 3f2c8b3b494ff57bac0af30a8b72467788155114
MD5: 374b42e831b62920d9de38962a32c99e
File size: 180931 bytes

Created files:

C:\Windows\Temp\sttemp-1568573892.bat – Backdoor IRCBot
%AppData%\A-1568573892.exe – Backdoor IRCBot
%Startup%\A-1568573892.exe – Backdoor IRCBot

Backdoor IRCBot created autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\A-1568573892: %AppData%\A-1568573892.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce\A-1568573892: %AppData%\A-1568573892.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnceEx\A-1568573892: %AppData%\A-1568573892.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\A-1568573892: %AppData%\A-1568573892.exe

Leave a Reply