Backdoor Zegost – (null)0.exe – 06c2b901baef351565a5a1a27ad41dbe

Backdoor Zegost
Also known as: Backdoor Farfli, Trojan Agent
SHA256: 1e6d0523bfecd06600bada6c2e9147f29e82f0eaf19e3cced81d21496293a56d
SHA1: 996be1540afb2691dba08b8b2f471b41322caa22
MD5: 06c2b901baef351565a5a1a27ad41dbe
File size: 267235 bytes

Created files:

C:\Windows\(null)0.exe – Backdoor Zegost
C:\Windows\BJ.exe – Backdoor Zegost

Backdoor Zegost created autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Kris: 06C2B901BAEF351565A5A1A27AD41DBE.EXE