Categories: Malware

What is “GenPack:Generic.Hupigon.PAS.CF68109B”?

The GenPack:Generic.Hupigon.PAS.CF68109B is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What GenPack:Generic.Hupigon.PAS.CF68109B virus can do?

Executable code extraction
Creates RWX memory
Drops a binary and executes it
Performs some HTTP requests
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
Deletes its original binary from disk
Installs itself for autorun at Windows startup
Creates a hidden or system file
Creates a copy of itself
Created a service that was not started
Anomalous binary characteristics

Related domains:

isgeziis.1a.cn

How to determine GenPack:Generic.Hupigon.PAS.CF68109B?


File Info:
crc32: C2114410md5: 302ef36f5d3b05c6708bb2266fa7aadcname: 302EF36F5D3B05C6708BB2266FA7AADC.mlwsha1: 245a0452347083e35191e4a717204e14659dbc29sha256: eee260ff47b4463bb54fd26056aca2c7d85e77102d3d087d5accbed21a3aa534sha512: 26d5f340e00a3e605e2b1ec4bce3ca972554bc1833022f2863fba1dcf090a57c621fd3b58b0109904db32d3a9bf31271e0d516b8eda8c1cc3f14d1cee9a83a15ssdeep: 12288:NHrEWn6W1Tue49pX0GG5afPqtxu2XGTc:NLEs4PS528u2stype: MS-DOS executable
Version Info:
0: [No Data]

GenPack:Generic.Hupigon.PAS.CF68109B also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
ALYac	GenPack:Generic.Hupigon.PAS.CF68109B
Cylance	Unsafe
Zillya	Backdoor.Hupigon.Win32.24398
CrowdStrike	win/malicious_confidence_100% (D)
Cybereason	malicious.f5d3b0
Cyren	W32/Heuristic-162!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Hupigon
APEX	Malicious
Avast	Win32:Trojan-gen
Cynet	Malicious (score: 100)
Kaspersky	VHO:Trojan.Win32.Staser.gen
BitDefender	GenPack:Generic.Hupigon.PAS.CF68109B
ViRobot	Backdoor.Win32.A.Hupigon.400384.E
MicroWorld-eScan	GenPack:Generic.Hupigon.PAS.CF68109B
Ad-Aware	GenPack:Generic.Hupigon.PAS.CF68109B
Sophos	ML/PE-A + Mal/EncPk-DF
DrWeb	Trojan.DownLoad.40447
VIPRE	Trojan.Win32.Packer.INCrypter0.3 (ep)
McAfee-GW-Edition	BehavesLike.Win32.VirRansom.fc
FireEye	Generic.mg.302ef36f5d3b05c6
Emsisoft	GenPack:Generic.Hupigon.PAS.CF68109B (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Backdoor/RBot.dsq
Avira	TR/Dropper.Gen
eGambit	Unsafe.AI_Score_93%
Antiy-AVL	Trojan/Generic.ASMalwFH.E6CA1B
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
GData	GenPack:Generic.Hupigon.PAS.CF68109B
Acronis	suspicious
MAX	malware (ai score=84)
VBA32	TScope.Trojan.Delf
Rising	Malware.Heuristic!ET#99% (RDMK:cmRtazrMtgWTnJiYWbtjklqwr4Q1)
Yandex	Trojan.Hupigon!l1vYd1kq96k
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/PEMask.A!tr
AVG	Win32:Trojan-gen