Trojan Delf – malware_208.vir(2).EXE – 7fcaeb42a7afc066b6a1822ff639a0a1

Trojan Delf
Also known as: Trojan Agent
SHA256: f1b5b29716e82f096f492e8319d2129f5ba3e66706fb6aa09d6e7ad86b0fd1a0
SHA1: f8ed8225057c2581df40ce838a1caede2f982a63
MD5: 7fcaeb42a7afc066b6a1822ff639a0a1
File size: 32256 bytes

Created files:

%Temp%\malware_208.vir(2).EXE – Trojan Delf

Trojan Delf created autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\Windows Services: %Temp%\malware_208.vir(2).EXE
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\UserInit: %WinDir%\System32\userinit.exe,”%Temp%\malware_208.vir(2).EXE”,
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell: Explorer.exe “%Temp%\malware_208.vir(2).EXE”