Trojan Banker – winexe.exe – 02697708c98c7c74582c9f00a094f68b

Trojan Banker
Also known as: Trojan Generic, Trojan Agent
SHA256: efc7e5c06272d5faaf71a0597f1a1336daf8571f9c5302d3a427b76849e56f17
SHA1: e70bd1ca4f0b8229373aade19bef9116ef58749a
MD5: 02697708c98c7c74582c9f00a094f68b
File size: 331776 bytes

Created files:

%Local AppData%\winexe.exe – Trojan Banker
%Temp%\ex.exe – Trojan Banker
%Temp%\winexe.exe – Trojan Banker

Trojan Banker created autostart registry keys:

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\SystemWin: “%Local AppData%\winexe.exe”