Submission Summary:

 

Technical Details:

NOTICE: The content shown in the above window is captured automatically and is not controlled or endorsed by ThreatExpert.
Please contact us on this link should any material be offensive or inappropriate and we will ensure any such content is blocked from future viewers of the report.

 

File System Modifications

#Filename(s)File SizeFile HashAlias
1 [file and pathname of the sample #1] 2,621,440 bytes MD5: 0x57812602F03A29B25283F1DAF699982E
SHA-1: 0xBE8ED60C554A4D3D0DDEEC2719036C3D5BF79A00
Generic BackDoor.adr [McAfee]
Trojan.ATRAPS [Ikarus]
2 %System%\SkinH_EL.dll 88,576 bytes MD5: 0x147127382E001F495D1842EE7A9E7912
SHA-1: 0x92D1ED56032183C75D4B57D7CE30B1C4AE11DC9B
packed with UPX [Kaspersky Lab]

 

Memory Modifications

Process NameProcess FilenameMain Module Size
[filename of the sample #1][file and pathname of the sample #1]2,789,376 bytes

Module NameModule FilenameAddress Space Details
SkinH_EL.dll%System%\SkinH_EL.dllProcess name: [filename of the sample #1]
Process filename: [file and pathname of the sample #1]
Address space: 0xF80000 - 0xFBD000

 

Registry Modifications

 

Other details

China

 

 

All content ("Information") contained in this report is the copyrighted work of Threat Expert Ltd and its associated companies ("ThreatExpert") and may not be copied without the express permission of ThreatExpert.

The Information is provided on an "as is" basis. ThreatExpert disclaims all warranties, whether express or implied, to the maximum extent permitted by law, including the implied warranties that the Information is merchantable, of satisfactory quality, accurate, fit for a particular purpose or need, or non-infringing, unless such implied warranties are legally incapable of exclusion. Further, ThreatExpert does not warrant or make any representations regarding the use or the results of the use of the Information in terms of their correctness, accuracy, reliability, or otherwise.

Copyright © 2017 ThreatExpert. All rights reserved.