Backdoor Zegost – (null)0.exe – 160a94db5460d174cd34117548bfe74b

Backdoor Zegost
Also known as: Backdoor Farfli, Trojan Eldorado
SHA256: 2ce57aee73545524a39cec014382d0b216761f8a3d0a760b06aabb1cfcfd2eba
SHA1: 9be00b01310f095165f9bb1a1f7b7ea70eed53ea
MD5: 160a94db5460d174cd34117548bfe74b
File size: 402312 bytes

Created files:

C:\Windows\(null)0.exe – Backdoor Zegost
C:\Windows\BJ.exe – Backdoor Zegost

Backdoor Zegost created autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Kris: 160A94DB5460D174CD34117548BFE74B.EXE