Troj/Agent-KMJ exhibits the following characteristics:
Runtime Analysis
Dropped Files
- c:\Documents and Settings\test user\Application Data\logon.exe
Registry Keys Created
- HKCU\Software\Microsoft\Windows\CurrentVersion\Run
- Init
- c:\Documents and Settings\test user\Application Data\logon.exe
- HKCU\Software\Microsoft\Internet Explorer\Settings
- KeyM
- 94 6b ee bc ff a5 bb 8b 5e 68 2a a5 8f bf 24 f5 7a 63 b7 9c bb db 14 d5 1f ae b0 57 34 02 59 6f c6 38 9c 7e bd 8f 82 02 9f 36 ab 3f 0c 6c b9 4c c3 98 7e e6 77 0a cc 53 20 6f 6b 5b ec 83 a8 9e 34 c1 9e 9c 73 93 05 01 f3 3d d2 da 79 ed 63 00 04 25 cb 82 fc 87 3d 89 e1 86 79 79 8c 67 a8 43 5c bc 65 26 66 5e b1 8a c5 51 95 e0 24 b8 7f f5 1a 1c 20 83 dd b7 44 e6 e7 66 b3 5d 88 a7 85 c8 2b a4 58 4e 18 85 a2 9d d3 16 d5 89 e6 51 4b 70 90 c9 f3 82 69 13 f1 09 ed 7c 30 86 2a 16 4a 4c a4 06 fa f9 78 c4 7d 72 93 fc 64 d7 48 c5 fb 83 a2 44 0a 98 77 be cd 4b fe a8 69 a2 16 f2 73 c5 f1 44 ff 11 38 3e af 5f 3f 87 05 61 61 fc ff 22 be 00 d5 46 67 a0 ba ce 65 a5 c7 32 03 93 11 96 62 7e eb 0b 5d 9d 9a 92 1b 41 10 8c 2c 9b 09 a5 11 84 eb 91 ca 34 18 0e 92 2d 85 c7 6b 02 b0 ef
Processes Created
- c:\windows\system32\cmd.exe