Trojan Delf – Updater.exe – 54ad41a42e0c7ee4443a9be89ca534fe

Trojan Delf
Also known as: Trojan Agent, Backdoor Tordev
SHA256: 7ae251af1210de14be1b1729c5d8a5912d0abbd0279f05eab5acaf62d5cded51
SHA1: 93d216cef8b1682cf14d8ddbd1c8cdbfc447c57c
MD5: 54ad41a42e0c7ee4443a9be89ca534fe
File size: 774144 bytes

Created files:

%SysDir%\LocalUpdates\Updater.exe – Trojan Delf

Trojan Delf created autostart registry keys:

HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\UserInit: %WinDir%\System32\userinit.exe,%WinDir%\System32\LocalUpdates\Updater.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\UpdateSteamCrack: %WinDir%\System32\LocalUpdates\Updater.exe