Trojan OnLineGames – test.bat – dbb78981c4ae1b29a472cd52af20a796

Trojan OnLineGames
Also known as: Trojan Agent, Trojan Bdld
SHA256: 2c31d509f47450235ff7963bba49e203b31f442ecc80027abb08b5963050891c
SHA1: 61aff26f2c41102f903ad23db1d95bb1a62c38ed
MD5: dbb78981c4ae1b29a472cd52af20a796
File size: 5120 bytes

Created files:

C:\test.bat – Trojan OnLineGames
%SysDir%\NetCon.exe – Trojan OnLineGames
%SysDir%\NetUpdate.exe – Trojan OnLineGames
%SysDir%\rundll39.exe – Trojan OnLineGames

Trojan OnLineGames created autostart registry keys:

HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit: %WinDir%\System32\userinit.exe,%WinDir%\System32\rundll39.exe
XSect