Backdoor Zegost – (null)0.exe – 02e2dbabaef5f9d359e5e5adf86d3a8b

Backdoor Zegost
Also known as: Backdoor Farfli, Trojan Magania
SHA256: 0aaf8cb28adf5fd76dc92e969ea047f3af287ebca35ccc9c80b1b4423f6be6a6
SHA1: beb32c4ea4450a4ed5bd3f835757b1749a4771d1
MD5: 02e2dbabaef5f9d359e5e5adf86d3a8b
File size: 447876 bytes

Created files:

C:\Windows\(null)0.exe – Backdoor Zegost
C:\Windows\BJ.exe – Backdoor Zegost

Backdoor Zegost created autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Kris: 02E2DBABAEF5F9D359E5E5ADF86D3A8B.EXE