Backdoor Zegost
Also known as: Trojan Agent, Trojan Eldorado
SHA256: 67c884a591c075fd8447ac46f0aff40f710e051ca63828a1e90130cd87b95529
SHA1: 2a9c7842f1cb4c1e7329b1b01c675197d52b20e6
MD5: 00f9b01b9309dd96619a6337391f628c
File size: 406729 bytes

Created files:

C:\Windows\(null)0.exe – Backdoor Zegost
C:\Windows\BJ.exe – Backdoor Zegost

Backdoor Zegost created autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Kris: 00F9B01B9309DD96619A6337391F628C.EXE