Categories: Trojan

TrojanClicker:Win32/Hatigh.C (file analysis)

The TrojanClicker:Win32/Hatigh.C is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanClicker:Win32/Hatigh.C virus can do?

Authenticode signature is invalid
Attempts to modify proxy settings
Attempts to disable or modify Explorer Folder Options
Attempts to modify Explorer settings to prevent file extensions from being displayed
Attempts to modify Explorer settings to prevent hidden files from being displayed

How to determine TrojanClicker:Win32/Hatigh.C?


File Info:
name: 0A2B44D50A1ADA819201.mlwpath: /opt/CAPEv2/storage/binaries/7ddc119fce53b0692b2bcbfdc1b5ecd2e788ab4fdac5e498347e92a871f4a07ecrc32: 2A17B6E4md5: 0a2b44d50a1ada819201ca20cf87a7f1sha1: 0b2ba3ada307da4113316dfac4465edd72be24e4sha256: 7ddc119fce53b0692b2bcbfdc1b5ecd2e788ab4fdac5e498347e92a871f4a07esha512: 64fc6d3c2c0a8c30232cc24cc5ef24879b052f8a01021828fcebc2db46720db3180de7b0e2ed5e8d7c6fc06374dfef77daf5a0fa9d429f72f8d0d7f016533257ssdeep: 768:OXtuCNba87ebyOqAILhDBtEhd0zovonk:OXj48vOUrtEhrxtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T16EF32B16A150F0E2C0A156F137308BA1E6BCBA731B68E9F3D7802D667AB01F7C719957sha3_384: 063d4beff8e968c4e76ed30cec44f24308db77e34f5b2e1405737455bf0e2b9ef8d58527464f6b0d35cfcad0506004f3ep_bytes: e8653d0000e8453f000050e8e5420000timestamp: 2009-04-24 08:27:03
Version Info:
0: [No Data]

TrojanClicker:Win32/Hatigh.C also known as:

Bkav	W32.AIDetect.malware1
MicroWorld-eScan	Gen:Trojan.RegistryDisabler.jmW@aypuQto
ClamAV	Win.Trojan.Agent-35563
FireEye	Generic.mg.0a2b44d50a1ada81
ALYac	Gen:Trojan.RegistryDisabler.jmW@aypuQto
Malwarebytes	Malware.Heuristic.1001
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan-Downloader ( 004cc1071 )
K7GW	Trojan-Downloader ( 004cc1071 )
Cybereason	malicious.50a1ad
VirIT	Trojan.Win32.Generic.AIJE
Cyren	W32/Blocker-based!Maximus
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	Win32/TrojanDownloader.Small.CYF
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	Trojan-Downloader.Win32.Suurch.pfm
BitDefender	Gen:Trojan.RegistryDisabler.jmW@aypuQto
NANO-Antivirus	Trojan.Win32.Vilsel.bkirf
Avast	Win32:Vitro [Inf]
Tencent	Malware.Win32.Gencirc.10b548a6
Ad-Aware	Gen:Trojan.RegistryDisabler.jmW@aypuQto
Emsisoft	Gen:Trojan.RegistryDisabler.jmW@aypuQto (B)
Comodo	TrojWare.Win32.TrojanDownloader.Generic.ad0@1d9fji
DrWeb	Trojan.DownLoad.41918
VIPRE	Gen:Trojan.RegistryDisabler.jmW@aypuQto
TrendMicro	TROJ_HATIGH.SMA
McAfee-GW-Edition	GenDownloader.bp.ad
Sophos	ML/PE-A + Troj/Dloadr-CLQ
SentinelOne	Static AI – Malicious PE
GData	Gen:Trojan.RegistryDisabler.jmW@aypuQto
Jiangmin	TrojanDownloader.Suurch.co
Webroot	W32.Clicker.Gen
Avira	TR/Downloader.Gen
MAX	malware (ai score=88)
Antiy-AVL	Trojan/Generic.ASMalwS.3E2
ViRobot	Trojan.Win32.Downloader.159744.BG
Microsoft	TrojanClicker:Win32/Hatigh.C
Google	Detected
AhnLab-V3	Trojan/Win32.Suurch.C111027
McAfee	GenDownloader.bp.ad
TACHYON	Trojan-Downloader/W32.Suurch.159561
VBA32	BScope.Trojan-Spy.Zbot
Cylance	Unsafe
TrendMicro-HouseCall	TROJ_HATIGH.SMA
Rising	Trojan.DL.Win32.Undef.eet (CLASSIC)
Yandex	Trojan.GenAsa!qkbrJ+vDxm4
Ikarus	Trojan-Dropper.Agent
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Generic.AC.C1537!tr
BitDefenderTheta	AI:Packer.EA8F88FE1E
AVG	Win32:Vitro [Inf]
Panda	Trj/Genetic.gen
CrowdStrike	win/malicious_confidence_90% (W)