| MD5 | 80fdd55e1727557a79b2115933568b1c |
| SHA1 | 51e46823fb6174c54460bf56a7b0f894b11b567a |
| Domains | [doorlink.bhtmm.com] [zhake122333.vicp.net] |
| Antivirus | [Backdoor.Bifrose.alnt.n3] |
| [Backdoor.Hupigon.AYPE] | |
| [Backdoor.Win32.Gpigeon.bmi] | |
| [BKDR_BIFROSE.BGW] | |
| [Downloader.Delf.Win32.8032] | |
| [Infostealer.Gampass] | |
| [SScope.Backdoor.Win32.Hupigon.cmpw] | |
| [Trojan-Downloader.Win32.Delf.bdc] | |
| [Trojan-PWS.Win32.QQShou] |