What is “Backdoor:Win32/Hupigon!mclg”?

The Backdoor:Win32/Hupigon!mclg is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Backdoor:Win32/Hupigon!mclg virus can do?

Sample contains Overlay data
Unconventionial language used in binary resources: Korean
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Backdoor:Win32/Hupigon!mclg?


File Info:
name: 7C820581F412C12D6C61.mlw
path: /opt/CAPEv2/storage/binaries/2b915f2c15e1f99a631dde9c56efadf2792e4d84f9b768f88be73e8a27185c68
crc32: 2DB0447D
md5: 7c820581f412c12d6c61248a7fcca461
sha1: fb18bd75ddda8c1c9187abd1bb9e3ce0d7e087f0
sha256: 2b915f2c15e1f99a631dde9c56efadf2792e4d84f9b768f88be73e8a27185c68
sha512: cfe4b1ed596f0340e58511a532cfb28ad23c10b77a746f77ebbabc0aad3bd52b974eb663e2cf1440dfcd357fe7d966ff0187f228deb3d7745c6881a679b5394f
ssdeep: 12288:aqQPjIGtjNcVmtt/qPDack9Fg9ut1y5UX6KKG6P9MtJG9b4TVEmlIUfq7K2ovJbY:eI0u6pNX6hkJG9b4TVEmlIUfq7zovRY
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1C9058C13B192C43AD17610B24F677B68E6BEFA684F1214C363C40D6D5E7ACD66A3703A
sha3_384: 1be5ad05505a35e1c3eb6f69a421a1a3c8680509dad61d3a63e8f84703d82ab774710e855e2fab877f853c85fb066ffe
ep_bytes: 558bec6aff68989f4700687c85420064
timestamp: 2005-07-26 07:08:02

Version Info:
Comments: 
CompanyName: 
FileDescription: JoinServer
FileVersion: 0, 77, 0, 0
InternalName: JoinServer
LegalCopyright: Copyright (C) 2000
LegalTrademarks: 
OriginalFilename: JoinServer.EXE
PrivateBuild: 
ProductName: JoinServer
ProductVersion: 0, 77, 0, 0
SpecialBuild: 
Translation: 0x0412 0x04b0

Backdoor:Win32/Hupigon!mclg also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Hupigon.4!c
MicroWorld-eScan	Trojan.Generic.31418886
ClamAV	Win.Trojan.Hupigon-41376
FireEye	Generic.mg.7c820581f412c12d
CAT-QuickHeal	Trojan.MauvaiseRI.S5250795
McAfee	GenericRXFE-AH!7C820581F412
Malwarebytes	Wapomi.Virus.FileInfector.DDS
VIPRE	Trojan.Generic.31418886
Sangfor	Trojan.Win32.Generik.BQOBLJP
K7AntiVirus	Riskware ( 0040eff71 )
Alibaba	Backdoor:Win32/Generic.1002fd68
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.5ddda8
VirIT	Backdoor.Win32.Hupigon5.AUAB
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Generik.BQOBLJP
APEX	Malicious
BitDefender	Trojan.Generic.31418886
NANO-Antivirus	Trojan.Win32.Hupigon.exmqvx
SUPERAntiSpyware	Backdoor.Hupigon/Variant
Avast	FileRepMalware [Trj]
TACHYON	Backdoor/W32.Hupigon.852052.B
Sophos	Mal/Generic-R
Zillya	Backdoor.Hupigon.Win32.211887
McAfee-GW-Edition	BehavesLike.Win32.Infected.cm
Emsisoft	Trojan.Generic.31418886 (B)
GData	Trojan.Generic.31418886
Jiangmin	Backdoor/Hupigon.avkn
Antiy-AVL	Trojan[Backdoor]/Win32.Hupigon
Arcabit	Trojan.Generic.D1DF6A06
ViRobot	Backdoor.Win32.Hupigon.852052
Microsoft	Backdoor:Win32/Hupigon!mclg
Google	Detected
VBA32	BScope.Trojan.Fuery
ALYac	Trojan.Generic.31418886
MAX	malware (ai score=86)
Cylance	unsafe
Rising	Trojan.Generic@AI.85 (RDML:uYj4NFzIMvO2iPV0YC14zA)
Ikarus	Trojan.Backdoor.Hupigon5
MaxSecure	Trojan.Malware.74335048.susgen
Fortinet	W32/PossibleThreat
BitDefenderTheta	Gen:NN.ZexaE.36348.0y1@aygsYvdG
AVG	FileRepMalware [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_90% (W)

How to remove Backdoor:Win32/Hupigon!mclg?

Backdoor:Win32/Hupigon!mclg removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X