Worm Autorun – KB00931844.exe – 5ff96b3a45a5ca3d125e8ea6248493fc

Worm Autorun
Also known as: Trojan Agent, Trojan Banker
SHA256: 19102b08b362d8f25902fabc11ecd06a016e10c913e40209746ed13894dc7ffd
SHA1: 4f52cf08cbd7b08ddcc19482115214625accb16e
MD5: 5ff96b3a45a5ca3d125e8ea6248493fc
File size: 113152 bytes

Created files:

%AppData%\KB00931844.exe – Worm Autorun
%Temp%\exp75.tmp.bat – Worm Autorun

Worm Autorun created autostart registry keys:

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\KB00931844.exe: “%AppData%\KB00931844.exe”