Trojan[Backdoor]/Win32.Androm also known as Virus.Win32.Heur.p, Trojan.Win32.Injector.BBIAA, VirTool:Win32/VBInject.
Malware Analysis of Trojan[Backdoor]/Win32.Androm – KBDHICDA.EXE
Created files:
%SysDir%\kbdhicda.exe
Autostart registry keys:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\loghsevt: “%SysDir%\kbdhicda.exe”
Detected by UnHackMe:
KBDHICDA.EXE
Default location: %SYSDIR%\KBDHICDA.EXE
Dropper hash(md5): b8334e86c36035ce58717334fab561d5