Trojan OnLineGames – jbhxabyt.exe – 07229cab8cc4e196136da0c928b99637

Trojan OnLineGames
Also known as: Trojan Magania, Trojan Agent
SHA256: e201342b1f5365d4ea7bdf7f83c184d2f0b240a8aa0855ca096cfecd9ed5fe0c
SHA1: 0230fbb15ac5f9e7c78b253fe829d0f9cd2b0257
MD5: 07229cab8cc4e196136da0c928b99637
File size: 16531 bytes

Created files:

%SysDir%\jbhxabyt.exe – Trojan OnLineGames
%SysDir%\oohxdbyt.dll – Trojan OnLineGames
%SysDir%\smhxbbyt.sys – Trojan OnLineGames
%SysDir%\verclsid.exe – Trojan OnLineGames
%Temp%\~DFD6175840.bat – Trojan OnLineGames
%Temp%\~DFD6177683.bat – Trojan OnLineGames
%Temp%\~DFD6178083.bat – Trojan OnLineGames

Trojan OnLineGames created autostart registry keys:

HKLM\Software\Classes\CLSID\{5B1AEF69-DDAE-FDAD-DCAB-698F026ABDB5}\InprocServer32 : %WinDir%\System32\oohxdbyt.dll