Backdoor Zegost – (null)0.exe – 0a1ed3c632dc6bacc818e161af6d2c38

Backdoor Zegost
Also known as: Backdoor Farfli, Trojan Magania
SHA256: c2b8e70c22cf6a99bdd6abf8b2ded3876c67fee31fb363eeefc70034f73a80aa
SHA1: 6d8b96abde72c0f7f5bb43a55030e79f33e170e1
MD5: 0a1ed3c632dc6bacc818e161af6d2c38
File size: 225856 bytes

Created files:

C:\Windows\(null)0.exe – Backdoor Zegost
C:\Windows\BJ.exe – Backdoor Zegost

Backdoor Zegost created autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Kris: 0A1ED3C632DC6BACC818E161AF6D2C38_0A1ED3C632DC6BACC818E161AF6D2C38.EXE