Backdoor Maximus – Microsoft Windows Update.exe – 8cc5665224ba4e5f2ac51746aad5aa1c

Backdoor Maximus
Also known as: Trojan Banker, Trojan Generic
SHA256: eaa42b82d087eabc69a9663c8ea7730178867ecaa0b68a34630039263de07a1f
SHA1: 98f4b09f7ab6fb721ebfe91ad0e9a74a84ba8805
MD5: 8cc5665224ba4e5f2ac51746aad5aa1c
File size: 352256 bytes

Created files:

%AppData%\Windows Update\Microsoft Windows Update.exe – Backdoor Maximus
%Temp%\3892358092376.bat – Backdoor Maximus

Backdoor Maximus created autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Microsoft Windows Update: %AppData%\Windows Update\Microsoft Windows Update.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Microsoft Windows Update: %AppData%\Windows Update\Microsoft Windows Update.exe