BKDR_HUPIGON.KUJ

This backdoor may be dropped by other malware. It may be downloaded unknowingly by a user when visiting malicious Web sites.

It drops copies of itself.

It creates registry entries to enable its automatic execution at every system startup. It registers itself as a system service to ensure its automatic execution at every system startup. It does this by creating registry keys/entries.

It drops an AUTORUN.INF file to automatically execute dropped copies when the drives are accessed.

It opens a random port to allow a remote user to connect to the affected system. Once a successful connection is established, the remote user executes commands on the affected system.

It accesses Web sites to download files. As a result, malicious routines of the downloaded files may be exhibited on the affected system.

It creates mutex(es) to ensure that only one instance of itself is running in memory.

Related Items