Trojan OnLineGames – test.bat – 6fcbdf2fa0462874beab38890d911f69

Trojan OnLineGames
Also known as: Trojan Downloader.Generic, Trojan Agent
SHA256: 4d62a4e200b8001e9677fa1d8f85e02577c7f3fd54c6a1538e9ba8f785b02aee
SHA1: eb82f5dffff460da7ff815396a55586705d76c97
MD5: 6fcbdf2fa0462874beab38890d911f69
File size: 4608 bytes

Created files:

C:\test.bat – Trojan OnLineGames
%SysDir%\NetCon.exe – Trojan OnLineGames
%SysDir%\NetUpdate.exe – Trojan OnLineGames
%Temp%\rundll54.exe – Trojan OnLineGames

Trojan OnLineGames created autostart registry keys:

HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit: %WinDir%\System32\userinit.exe,%Temp%\\rundll54.exe
XSect