PUA

What is “PUP.Optional.HueCommunication”?

Malware Removal

The PUP.Optional.HueCommunication is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What PUP.Optional.HueCommunication virus can do?

  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Creates RWX memory
  • Anomalous file deletion behavior detected (10+)
  • Dynamic (imported) function loading detected
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine PUP.Optional.HueCommunication?



File Info:

name: 755E557C319E52420211.mlw
path: /opt/CAPEv2/storage/binaries/f098f245e7ed90d2cf4f3cec5a351705c1a3ca4d4d91e8b2baa7dc35f05aa281
crc32: 87EC29A5
md5: 755e557c319e524202114d975709ed37
sha1: f54a320b38d46815f183cd945b115d9f872f4352
sha256: f098f245e7ed90d2cf4f3cec5a351705c1a3ca4d4d91e8b2baa7dc35f05aa281
sha512: 2f52775eeb835757b449ccc9edb02a833a1132a80b94ed3a383a7bff1fc3946fb5f81fbd9bed285f469beb3eaa3091ba68ab28727b4045b2621f87ff79aa9ebc
ssdeep: 24576:1wOkYnk+oLQ8w5u/ivUKnPxpBtFDSMlizCipsq3zqx+3zydri/IiPq7FjIQd+1lt:OOFn/X5ErKvF38zCiL2MWdroryIFh
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1BB753392567A9191CA74C4B0CD98EDF2BCC7AD731F7F876B97950E0338A212325C4BA4
sha3_384: c60dffe27d9e72683d98bcf7ca540581383c93704de5cef516c8bdcb1a6eed5883d3b99fb8354b1b974a859f62149cb7
ep_bytes: 60be00f079008dbe0020c6ffc787147c
timestamp: 2019-08-27 02:14:02


Version Info:

CompanyName: ㈜휴커뮤니케이션
FileDescription: vcodecopen
FileVersion: 2019.8.27.1
LegalCopyright: Copyright(c) by HueCommunication All rights reserved.
OriginalFilename: vcodecopen.exe
ProductName: vcodecopen
ProductVersion: 2019.8.27.1
Translation: 0x0409 0x04e4

PUP.Optional.HueCommunication also known as:

LionicRiskware.Win32.Snojan.1!c
Elasticmalicious (high confidence)
CynetMalicious (score: 99)
FireEyeGeneric.mg.755e557c319e5242
ALYacTrojan.GenericKD.37080053
CylanceUnsafe
ZillyaAdware.Kraddare.Win32.7879
K7AntiVirusAdware ( 004f67e51 )
AlibabaDownloader:Win32/Snojan.92422749
K7GWAdware ( 004f67e51 )
CrowdStrikewin/malicious_confidence_90% (D)
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Adware.Kraddare.NY
APEXMalicious
Paloaltogeneric.ml
Kasperskynot-a-virus:HEUR:Downloader.Win32.Snojan.gen
BitDefenderTrojan.GenericKD.37080053
NANO-AntivirusTrojan.Win32.Snojan.hwzyyq
SUPERAntiSpywarePUP.DownloaderSnojan/Variant
MicroWorld-eScanTrojan.GenericKD.37080053
AvastWin32:AdwareX-gen [Adw]
TencentMalware.Win32.Gencirc.10ce5288
Ad-AwareTrojan.GenericKD.37080053
EmsisoftTrojan.GenericKD.37080053 (B)
F-SecureAdware.ADWARE/Adware.Gen7
DrWebTrojan.Siggen6.63994
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_GEN.R002C0WKR21
McAfee-GW-EditionBehavesLike.Win32.Dropper.tc
SophosGeneric PUA PF (PUA)
SentinelOneStatic AI – Malicious PE
GDataTrojan.GenericKD.37080053
JiangminDownloader.Snojan.ccg
AviraADWARE/Adware.Gen7
Antiy-AVLRiskWare[Downloader]/Win32.Snojan
GridinsoftRansom.Win32.Sabsik.sa
ArcabitTrojan.Generic.D235CBF5
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
AhnLab-V3PUP/Win32.PopAd.C2754747
McAfeeGenericRXAA-AA!755E557C319E
MAXmalware (ai score=80)
VBA32BScope.Downloader.Snojan
MalwarebytesPUP.Optional.HueCommunication
TrendMicro-HouseCallTROJ_GEN.R002C0WKR21
YandexTrojan.GenAsa!xol1uDh/SAM
IkarusPUA.Kraddare
eGambitUnsafe.AI_Score_99%
FortinetAdware/Kraddare
AVGWin32:AdwareX-gen [Adw]
PandaTrj/Genetic.gen
MaxSecureTrojan.Malware.300983.susgen

How to remove PUP.Optional.HueCommunication?

PUP.Optional.HueCommunication removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment