Trojan Lethic – brenasa.exe – d668191daa59b0e98aa68f313a0c7575

Trojan Lethic
Also known as: Trojan Jorik, Trojan Generic
SHA256: b3f00ceaf952046405c17e417c930d1782f3db4959ebaedc70e61f98c91c0fe1
SHA1: 1f40237c2a95563101613ee08cfef34e38268d4c
MD5: d668191daa59b0e98aa68f313a0c7575
File size: 19456 bytes

Created files:

C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-14699\brenasa.exe – Trojan Lethic

Trojan Lethic created autostart registry keys:

HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Taskman: C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-14699\brenasa.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\tbrena: C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-14699\brenasa.exe
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell: explorer.exe,C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-14699\brenasa.exe