Backdoor Zegost – (null)0.exe – 036571577278ef62e1ca4b88ff87d36a

Backdoor Zegost
Also known as: Trojan Magania, Backdoor Farfli
SHA256: ca8ba8f2700e3ef92bfe06d230fa2e34fb0b0edf1c7e2f91f448e2f3e559f20c
SHA1: 2520f5e1336a4291faedcea604fa45c8f5202a16
MD5: 036571577278ef62e1ca4b88ff87d36a
File size: 286101 bytes

Created files:

C:\Windows\(null)0.exe – Backdoor Zegost
C:\Windows\BJ.exe – Backdoor Zegost

Backdoor Zegost created autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Kris: 036571577278EF62E1CA4B88FF87D36A.EXE