Troj/Agent-ZFP exhibits the following characteristics:
File Information
- Size
- 221K
- SHA-1
- a29466cc49b29e925cd3c061e162ee933add4bb4
- MD5
- 1f04bb2ad6ad348b108fb31dcae285ee
- CRC-32
- 54f6989e
- File type
- Windows executable
- First seen
- 2011-06-27
Runtime Analysis
Dropped Files
- C:\WINDOWS\system32\ntkrll32.dll
- Size
- 59K
- SHA-1
- 08d4f25584007d576d097190d1ce4dc5c7dc1ff7
- MD5
- 7e33f0754ac75a4a8523ffa2eb286526
- CRC-32
- 02b2fc4b
- File type
- Windows executable
- First seen
- 2012-12-03
Registry Keys Created
- HKCU\Software\AppDataLow\Software\Microsoft\Internet Explorer\Security\AntiPhishing\F05EEEEE-8F65-A215-9924-33F6DD98178A
- Group
- 0x0000049c
Processes Created
- c:\windows\system32\attrib.exe
- c:\windows\system32\cmd.exe