Backdoor Zegost – (null)0.exe – 014412800df596d064a8412655b0582f

Backdoor Zegost
Also known as: Trojan Eldorado, Trojan Agent
SHA256: e33306ed16f38df10ead316789b97ba15973ce6816bc51cc0c5cd4bd6f91cf16
SHA1: a8480d3b820ee6baf7ce653d4cb05531a1119335
MD5: 014412800df596d064a8412655b0582f
File size: 175240 bytes

Created files:

C:\Windows\(null)0.exe – Backdoor Zegost
C:\Windows\BJ.exe – Backdoor Zegost

Backdoor Zegost created autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Kris: 014412800DF596D064A8412655B0582F.EXE