Trojan Crypt – KB00131844.exe – b4790a09b20fd4db9eafb41284920e46

Trojan Crypt
Also known as: Trojan Zbot, Worm Autorun
SHA256: 2ae8b6d50d0a0dc48bbb2b90a721b9578600ccc4d7896278d7ae7c18cc472b3e
SHA1: d9d4bdb27a69b458e15a24b6341eb1798c40f522
MD5: b4790a09b20fd4db9eafb41284920e46
File size: 108704 bytes

Created files:

%AppData%\KB00131844.exe – Trojan Crypt
%Temp%\POS1.tmp.BAT – Trojan Crypt

Trojan Crypt created autostart registry keys:

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\KB00131844.exe: “%AppData%\KB00131844.exe”