Trojan Delf – WinServices.exe – 0a4568625ec21542dc5108e0283d3f95

Trojan Delf
Also known as: Trojan Banload, Trojan Agent
SHA256: c92f41ed89c6592723677db1c8dcee15d76a22f817d7b7f4f34e712361332e70
SHA1: 7482ea2a6da98c2e0512b7b7b52741948313a209
MD5: 0a4568625ec21542dc5108e0283d3f95
File size: 1065984 bytes

Created files:

%Local AppData%\Uniless\WinServices.exe – Trojan Delf

Trojan Delf created autostart registry keys:

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\WinServices.exe: %Local AppData%\Uniless\WinServices.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\MSMSGS: “%Program Files%\Messenger\msmsgs.exe” /background