mirror of
https://github.com/MBCProject/mbc-markdown
synced 2026-06-08 11:36:36 +00:00
Chris Lenk
754 B
754 B
| ID | X0008 |
| Aliases | Delf, Emerleox, Logsnif, Graybird, Pcclient |
| Platforms | Windows |
| Year | 2013 |
Hupigon
A family of backdoors.
Behaviors
| Name | Use |
|---|---|
| Registry Run Keys / Startup Folder | Hupigon drops the file "Systen.dll" and adds the registry entry: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\BITS DllName = "%System%\Systen.dll". [1] |
References
[1] https://www.trendmicro.com/vinfo/us/threat-encyclopedia/malware/HUPIGON