Home Malware Programs Trojans Trojan.Ghost RAT

Trojan.Ghost RAT

Posted: December 18, 2016

Threat Metric

Threat Level: 8/10
Infected PCs: 335
First Seen: December 18, 2016
Last Seen: March 6, 2024
OS(es) Affected: Windows

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



c:\program files (x86)\ruoydh wenyo\aaayjsm.exe File name: aaayjsm.exe
Size: 16.02 MB (16020480 bytes)
MD5: 8aafc5320ffc3b59af8d37cef6ee6dda
Detection count: 59
File type: Executable File
Mime Type: unknown/exe
Path: c:\program files (x86)\ruoydh wenyo
Group: Malware file
Last Updated: October 23, 2018
%SYSTEMDRIVE%\Users\<username>\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\NaverAgent.exe File name: NaverAgent.exe
Size: 513.21 KB (513213 bytes)
MD5: 21048b200b580f49d54c07311a2cd07b
Detection count: 49
File type: Executable File
Mime Type: unknown/exe
Path: %SYSTEMDRIVE%\Users\<username>\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\NaverAgent.exe
Group: Malware file
Last Updated: June 26, 2020

Registry Modifications

The following newly produced Registry Values are:

Regexp file mask%WINDIR%\cress.exe%WINDIR%\FileName.jpg
Loading...