Trojan Banker – ctfmoms.exe – b6122d27068ade026d9dd9b557f4c086

Trojan Banker
Also known as: Trojan Delf, Trojan Bancos
SHA256: 1658055b93a39023794fbb7181d165932cebc9a07f6e7d716299fcc96c7aeb90
SHA1: 99c3bc152cff06941afa15bc6ffadcf33ffc1029
MD5: b6122d27068ade026d9dd9b557f4c086
File size: 698988 bytes

Created files:

%SysDir%\ctfmoms.exe – Trojan Banker

Trojan Banker created autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\KernellApp: %WinDir%\System32\ctfmoms.exe