Backdoor Zegost – (null)0.exe – 00a817db2dc547a8dddc144c07b167fb

Backdoor Zegost
Also known as: Trojan Generic, Backdoor Farfli
SHA256: a0d93f2bfedee75b2240632dca4f086fb43fd77c0b7a52a665078b7546276273
SHA1: 380a2fcd19395d3faf745782673502b632656003
MD5: 00a817db2dc547a8dddc144c07b167fb
File size: 303479 bytes

Created files:

C:\Windows\(null)0.exe – Backdoor Zegost
C:\Windows\BJ.exe – Backdoor Zegost

Backdoor Zegost created autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Kris: 00A817DB2DC547A8DDDC144C07B167FB.EXE