Trojan Banker – system32.exe – 20ca1f5e214aab264d04b3bc2a757ec7

Trojan Banker
Also known as: Trojan Downloader.Generic, Trojan Banload
SHA256: 9358d4b9f9dfe93fad3458540b729a15da3f1e47e0ee8c0be25a675241d7c80b
SHA1: bb2734431d157c77f842c06faf9d9abf69a5bc06
MD5: 20ca1f5e214aab264d04b3bc2a757ec7
File size: 413244 bytes

Created files:

%SysDir%\system32.exe – Trojan Banker
%AllUsersProfile%\start menu\programs\startup\system32.exe – Trojan Banker

Trojan Banker created autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\System32: %WinDir%\System32\System32.exe