Trojan Zbot – updates.exe – 8a4ab0193439536ca88176e55826dce1

Trojan Zbot
Also known as: Trojan PAM
SHA256: 5913437d7c1a9513894e0bb4f05c0fa12db61053fc6d8cffd3b654ca98b458e0
SHA1: 8ee4d668acb756322fa910c46fdf0a191d905158
MD5: 8a4ab0193439536ca88176e55826dce1
File size: 84992 bytes

Created files:

%AppData%\updates\updates.exe – Trojan Zbot
%Startup%\updates.exe – Trojan Zbot

Trojan Zbot created autostart registry keys:

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\engel: %AppData%\updates\updates.exe