Troj/Ursnif-T exhibits the following characteristics:
File Information
- Size
- 222K
- SHA-1
- 44af159ba6734280388faf07cafaf2d29216a441
- MD5
- 9f8ab4160decc836ec7899bb9302950c
- CRC-32
- bc890c44
- File type
- Windows executable
- First seen
- 2013-02-13
Runtime Analysis
Dropped Files
- C:\149484.bat
- Size
- 70
- SHA-1
- 3a99ef97e04fc98afe9449ba604228bb900224e0
- MD5
- 7db4a2ed201d2fe220d699a5f4f6816a
- CRC-32
- 81be7f6d
- File type
- ASCII text / 8-bit Unicode Transformation Format
- First seen
- 2013-03-09
- C:\WINDOWS\system32\ntkrll32.dll
- Size
- 58K
- SHA-1
- c3d1277a80c10d1e6b122557afa1a33acba4c1f0
- MD5
- ce83b253355de78f7b3b43d7ba26577a
- CRC-32
- cefa92e0
- File type
- Windows executable
- First seen
- 2013-02-15
Registry Keys Created
- HKCU\Software\AppDataLow\Software\Microsoft\Internet Explorer\Security\AntiPhishing\F05EEEEE-8F65-A215-9924-33F6DD98178A
- Group
- 0x000004b2