Backdoor Zegost – (null)0.exe – 0069f564c3d965fd84b7f38365f2a4a4

Backdoor Zegost
Also known as: Backdoor Farfli, Trojan Magania
SHA256: e17ae0ae74ea1057f36443815d4e65d0da5f1f8f171784b44b87a4c650851afb
SHA1: 73cea261ce3b8c1fbdb49f36ac2af646a8b79ff7
MD5: 0069f564c3d965fd84b7f38365f2a4a4
File size: 324181 bytes

Created files:

C:\Windows\(null)0.exe – Backdoor Zegost
C:\Windows\BJ.exe – Backdoor Zegost

Backdoor Zegost created autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Kris: 0069F564C3D965FD84B7F38365F2A4A4.EXE