Trojan.Loskad

By CagedTech in Trojans

Threat Scorecard

Table of Contents

Trojan.Loskad may create the following file(s):

#	File Name	MD5	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	agu0OP36Pw3g.exe	d3c6259a787a0fae941ef80cc49c32bb	130
Name: agu0OP36Pw3g.exe MD5: d3c6259a787a0fae941ef80cc49c32bb Size: 2.38 MB (2384920 bytes) Detections: 130 Type: Executable File Path: %TEMP% Group: Malware file Last Updated: July 19, 2017
2.	msi.exe	bb45b956916334881dfc67bffcd16feb	28
Name: msi.exe MD5: bb45b956916334881dfc67bffcd16feb Size: 2.61 MB (2618360 bytes) Detections: 28 Type: Executable File Path: %APPDATA%\Microsoft Group: Malware file Last Updated: July 19, 2017
3.	svchost.exe.update.exe	1cc60d6bb43977f84dd91987092b6d2a	5
Name: svchost.exe.update.exe MD5: 1cc60d6bb43977f84dd91987092b6d2a Size: 1.26 MB (1264616 bytes) Detections: 5 Type: Executable File Path: C:\Windows\Microsoft\svchost.exe.update.exe Group: Malware file Last Updated: August 29, 2021
4.	file.exe	f14e2c7945822302a0e5351dc5558e43	0
Name: file.exe MD5: f14e2c7945822302a0e5351dc5558e43 Size: 1.56 MB (1562008 bytes) Detections: 0 Type: Executable File Group: Malware file Last Updated: October 30, 2017

Trojan.Loskad may create the following registry entry or registry entries:

Regexp file mask

%APPDATA%\curl\curl_7_54.exe

%APPDATA%\Microsoft\msi.exe

%APPDATA%\wget\wget.exe

%APPDATA%\wget\wget_1_19_4.exe

%LOCALAPPDATA%\Deployment\Deploymentz.exe

%LOCALAPPDATA%\Google\Googlez.exe

%WINDIR%\Microsoft\svchost.exe

%WINDIR%\Microsoft\svchost.exe.exe

Software\GASTAT

Software\iesg

Software\nageinc

SYSTEM\ControlSet001\services\SvcHost Service Host

SYSTEM\ControlSet002\services\SvcHost Service Host

SYSTEM\CurrentControlSet\services\SvcHost Service Host