Trojan Agent – TEMP#01.EXE – 0bdae73594ec7696709c103f08c8011d

Trojan Agent
SHA256: 72d30f4777e0b1239fdb24f21579e9dc49661f2587aea7954b5f7f46e6a4106e
SHA1: 26cba7d0167f7b1adfb376a26b8856033bdeb7ca
MD5: 0bdae73594ec7696709c103f08c8011d
File size: 350441 bytes

Created files:

C:\windows\TEMP#01.EXE – Trojan Agent
C:\windows\TEMP$01.EXE – Trojan Agent
C:\windows\wincore.exe – Trojan Agent

Trojan Agent created autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\WinCore: %WinDir%\wincore.exe run