INDOSAT.EXE – Unclassified Malware removal

INDOSAT.EXE size: 310953 bytes
INDOSAT.EXE hash: 7FFD9C3384D938A2946DFC5AB9053B1A

Created files:

%TEMP%\~sfx005A03C19D\configSSH\isat1.bscp
%TEMP%\~sfx005A03C19D\configSSH\isat2.bscp
%TEMP%\~sfx005A03C19D\configSSH\tunnelier.exe
%TEMP%\~sfx005A03C19D\Indosat.exe
%TEMP%\~sfx005A03C19D\Proxifier PE\felix.conf
%TEMP%\~sfx005A03C19D\Proxifier PE\felixihik.exe
%TEMP%\~sfx005A03C19D\Proxifier PE\Helper64.exe
%TEMP%\~sfx005A03C19D\Proxifier PE\MSWINSCK.OCX
%TEMP%\~sfx005A03C19D\Proxifier PE\Profiles\Default.ppx
%TEMP%\~sfx005A03C19D\Proxifier PE\Profiles\isat.ppx
%TEMP%\~sfx005A03C19D\Proxifier PE\Proxifier.exe
%TEMP%\~sfx005A03C19D\Proxifier PE\ProxyChecker.exe
%TEMP%\~sfx005A03C19D\Proxifier PE\PrxDrvPE.dll
%TEMP%\~sfx005A03C19D\Proxifier PE\PrxDrvPE64.dll
%TEMP%\~sfx005A03C19D\whitefire.she

Detected by UnHackMe:

INDOSAT.EXE
Default location: %TEMP%\~SFX005A03C19D\INDOSAT.EXE

Dropper information:
MD5: 1141a05c695833d2c9ed9cb65d3f8e5d
File size: 11948255 bytes