Backdoor Zegost – BJ.exe – 12c7df4e1c06e76d37ada4560b7d57da

Backdoor Zegost
Also known as: Trojan Eldorado, Trojan Agent
SHA256: f8a6b6096bc52ca9de2b8630884cf6a59f9fa4c295a4172dec4cd8f7c4853112
SHA1: 107ecd6727167663d02140206cea1af12b3b4684
MD5: 12c7df4e1c06e76d37ada4560b7d57da
File size: 815915 bytes

Created files:

C:\Windows\BJ.exe – Backdoor Zegost
C:\Windows\notepab.exe – Backdoor Zegost
C:\Windows\svchest001465662051.exe – Backdoor Zegost

Backdoor Zegost created autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Kris: c:\Windows\notepab.exe