SYSTEM64.EXE – Backdoor Hupigon

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

SYSTEM64.EXE – Backdoor Hupigon removal

FileMD5Virus Alias
SYSTEM64.EXE 1fc8848bdc2b66f52d8aead511a8a115 Backdoor Hupigon
SYSTEM64.EXE 1fc8848bdc2b66f52d8aead511a8a115 Trojan Generic
SYSTEM64.EXE 1fc8848bdc2b66f52d8aead511a8a115 Trojan Eldorado
SYSTEM64.EXE 1fc8848bdc2b66f52d8aead511a8a115 Backdoor RBot
SYSTEM64.EXE 1fc8848bdc2b66f52d8aead511a8a115 Trojan CI
SYSTEM64.EXE 1fc8848bdc2b66f52d8aead511a8a115 Trojan Magania

SYSTEM64.EXE size: 43520 bytes
SYSTEM64.EXE hash: 1FC8848BDC2B66F52D8AEAD511A8A115

Created files:

%SysDir%\System64.exe

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\DRATSer\Type: 10010000
HKLM\System\CurrentControlSet\Services\DRATSer\Start: 02000000
HKLM\System\CurrentControlSet\Services\DRATSer\DisplayName: DRATRat
HKLM\System\CurrentControlSet\Services\DRATSer\ImagePath: %WinDir%\System32\System64.exe

Detected by UnHackMe:

SYSTEM64.EXE
Default location: %SYSDIR%\SYSTEM64.EXE

Dropper information:
MD5: 1fc8848bdc2b66f52d8aead511a8a115
File size: 43520 bytes

Leave a Reply