Trojan Delf – msdcsc.exe – de56b9df2b1a699a7c8a97b98c272c15

Trojan Delf
Also known as: Backdoor Tordev, Backdoor Maximus
SHA256: 81d52e3703ea14834092c672a30b178b8ef73ccd6e5ec09d2bf6d9f9e6432c65
SHA1: bb09458aace02e8d77a93d460f8c28a2b66b6419
MD5: de56b9df2b1a699a7c8a97b98c272c15
File size: 240640 bytes

Created files:

%SysDir%\MSDCSC\msdcsc.exe – Trojan Delf

Trojan Delf created autostart registry keys:

HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\UserInit: %WinDir%\System32\userinit.exe,%WinDir%\System32\MSDCSC\msdcsc.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\MSDCSC: %WinDir%\System32\MSDCSC\msdcsc.exe