Trojan.ATRAPS Files
%SYSTEMDRIVE%\Users\<username>\Documents\ElfBot NG\loader.exe
File name: loader.exeSize: 300.03 KB (300032 bytes)
MD5: f3a16fa61d62b459db2bae79b00653f2
Detection count: 3,209
File type: Executable File
Mime Type: unknown/exe
Path: %SYSTEMDRIVE%\Users\<username>\Documents\ElfBot NG\loader.exe
Group: Malware file
Last Updated: January 15, 2025
%WINDIR%\system32\ctfmontpq.exe
File name: ctfmontpq.exeSize: 10.75 KB (10752 bytes)
MD5: 76b1e45abd8c9952f81a07bc06871084
Detection count: 501
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\system32
Group: Malware file
Last Updated: December 1, 2010
%WINDIR%\system32\ctfmonmnl.exe
File name: ctfmonmnl.exeSize: 9.72 KB (9728 bytes)
MD5: bbae4138033fea60c987ccc3cfd65da4
Detection count: 152
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\system32
Group: Malware file
Last Updated: December 1, 2010
%WINDIR%\system32\ctfmontrr.exe
File name: ctfmontrr.exeSize: 11.26 KB (11264 bytes)
MD5: 46595d07f2d49c0398b8493c502cf766
Detection count: 105
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\system32
Group: Malware file
Last Updated: November 30, 2010
%WINDIR%\system32\ctfmonfip.exe
File name: ctfmonfip.exeSize: 10.24 KB (10240 bytes)
MD5: 7906f4c2bda4e4df20f36e84ddd66c6a
Detection count: 47
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\system32
Group: Malware file
Last Updated: December 9, 2010
%ALLUSERSPROFILE%\Datos de programa\TBofrUXGjfVX.exe
File name: TBofrUXGjfVX.exeSize: 438.27 KB (438272 bytes)
MD5: 168d183ca9c36dabf909f592a8de3a31
Detection count: 37
File type: Executable File
Mime Type: unknown/exe
Path: %ALLUSERSPROFILE%\Datos de programa
Group: Malware file
Last Updated: December 17, 2012
%WINDIR%\system32\ctfmonxca.exe
File name: ctfmonxca.exeSize: 9.72 KB (9728 bytes)
MD5: b36c632eaba8a3ee88b98372ed3f1485
Detection count: 33
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\system32
Group: Malware file
Last Updated: December 8, 2010
%WINDIR%\system32\ctfmonnrw.exe
File name: ctfmonnrw.exeSize: 9.72 KB (9728 bytes)
MD5: faae80f7abba4c431a7763d4efe8f59c
Detection count: 33
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\system32
Group: Malware file
Last Updated: November 30, 2010
%USERPROFILE%\Escritorio\Auto_Stage\HyM Auto Stage.dll
File name: HyM Auto Stage.dllSize: 368.12 KB (368128 bytes)
MD5: 9e2d5c100b54d5b34524d79e99be6158
Detection count: 23
File type: Dynamic link library
Mime Type: unknown/dll
Path: %USERPROFILE%\Escritorio\Auto_Stage
Group: Malware file
Last Updated: July 18, 2011
%WINDIR%\system32\ctfmon_na.exe
File name: ctfmon_na.exeSize: 10.24 KB (10240 bytes)
MD5: 63e3b940ef76b547590e7d14d2ff0e25
Detection count: 19
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\system32
Group: Malware file
Last Updated: December 7, 2010
%WINDIR%\system32\ctfmonequ.exe
File name: ctfmonequ.exeSize: 10.75 KB (10752 bytes)
MD5: cda2f270621239e1e99439c33adcf797
Detection count: 16
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\system32
Group: Malware file
Last Updated: February 3, 2011
%ALLUSERSPROFILE%\Application Data\Direct9x.exe
File name: Direct9x.exeSize: 1.26 MB (1261856 bytes)
MD5: 069bc3e11da9a704b2619938b632a156
Detection count: 12
File type: Executable File
Mime Type: unknown/exe
Path: %ALLUSERSPROFILE%\Application Data
Group: Malware file
Last Updated: October 25, 2012
%APPDATA%\SystemProc\lsass.exe
File name: lsass.exeSize: 97.79 KB (97792 bytes)
MD5: 7d2ef8437c73fcbebae317d3f4bea5ad
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\SystemProc
Group: Malware file
Last Updated: February 28, 2011
%WINDIR%\system32\ctfmonltt.exe
File name: ctfmonltt.exeSize: 9.72 KB (9728 bytes)
MD5: f7022df920a571a63422d85ba9b1d54f
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\system32
Group: Malware file
Last Updated: December 7, 2010
%WINDIR%\system32\ctfmonpho.exe
File name: ctfmonpho.exeSize: 10.24 KB (10240 bytes)
MD5: 357de68372dc0426ce852f69f085dc40
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\system32
Group: Malware file
Last Updated: December 7, 2010
%USERPROFILE%\Application Data\gKXWm.exe
File name: gKXWm.exeSize: 5.24 MB (5242880 bytes)
MD5: 749a46a4caeb1df0be8908fb89f82a98
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: %USERPROFILE%\Application Data
Group: Malware file
Last Updated: January 1, 2012
%WINDIR%\Tasks\sqlservr.exe
File name: sqlservr.exeSize: 1.62 MB (1620992 bytes)
MD5: a82defb742746f955ed3fb63afa30534
Detection count: 7
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\Tasks
Group: Malware file
Last Updated: March 20, 2012
%APPDATA%\Microsoft\Windows\Start Menu\Programs\RSGP.exe
File name: RSGP.exeSize: 203.26 KB (203264 bytes)
MD5: 32338bbe21e528040be17aee9807d3dd
Detection count: 7
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\Microsoft\Windows\Start Menu\Programs
Group: Malware file
Last Updated: January 19, 2012
%WINDIR%\system32\0047.DLL
File name: 0047.DLLSize: 37.37 KB (37376 bytes)
MD5: 7b9b3841382ef1a0faef1a9a05877182
Detection count: 7
File type: Dynamic link library
Mime Type: unknown/DLL
Path: %WINDIR%\system32
Group: Malware file
Last Updated: December 8, 2010
%USERPROFILE%\Desktop\vip.exe
File name: vip.exeSize: 456.7 KB (456704 bytes)
MD5: 3da148ae960580ce3f6018612393d94a
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %USERPROFILE%\Desktop
Group: Malware file
Last Updated: January 21, 2013
%WINDIR%\system32\ctfmondyt.exe
File name: ctfmondyt.exeSize: 9.72 KB (9728 bytes)
MD5: 21ecb217a7ef92438a12d2c16f318b5a
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\system32
Group: Malware file
Last Updated: December 8, 2010
%WINDIR%\system32\system\svchost.exe
File name: svchost.exeSize: 1.19 MB (1198592 bytes)
MD5: 495d923b5c9b0e4d47329c5f9602a752
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\system32\system
Group: Malware file
Last Updated: December 6, 2010
C:\Time Lock\timelock.exe
File name: timelock.exeSize: 1.02 MB (1028096 bytes)
MD5: 6415d2e978e7a765a45bf177beb1bb54
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: C:\Time Lock
Group: Malware file
Last Updated: December 6, 2010
%USERPROFILE%\Application Data\winlogon.exe
File name: winlogon.exeSize: 4.5 MB (4508672 bytes)
MD5: 1d0525b2ed927dfb44ca1cd23db743df
Detection count: 45
File type: Executable File
Mime Type: unknown/exe
Path: %USERPROFILE%\Application Data
Group: Malware file
Last Updated: November 28, 2011
%ALLUSERSPROFILE%\Anwendungsdaten\090a91\SI090_289.exe
File name: SI090_289.exeSize: 3.73 MB (3739136 bytes)
MD5: 577d159339cf11c5a8cefce2b44da373
Detection count: 31
File type: Executable File
Mime Type: unknown/exe
Path: %ALLUSERSPROFILE%\Anwendungsdaten\090a91
Group: Malware file
Last Updated: February 7, 2011
%WINDIR%\system32\ctfmoncgb.exe
File name: ctfmoncgb.exeSize: 10.24 KB (10240 bytes)
MD5: a58d8e8fd186f5d9ac090ab67be54cc2
Detection count: 10
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\system32
Group: Malware file
Last Updated: December 7, 2010
%WINDIR%\system32\ctfmonfzy.exe
File name: ctfmonfzy.exeSize: 10.75 KB (10752 bytes)
MD5: e82110a080a2e0b211ac00f968c548c6
Detection count: 60
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\system32
Group: Malware file
Last Updated: December 7, 2010
%WINDIR%\system32\CNC190C32.dll
File name: CNC190C32.dllSize: 313.34 KB (313344 bytes)
MD5: 5ed18632b1278c9c2a6c2749e8453361
Detection count: 16
File type: Dynamic link library
Mime Type: unknown/dll
Path: %WINDIR%\system32
Group: Malware file
Last Updated: December 8, 2010
%ALLUSERSPROFILE%\hfphwxho.exe
File name: hfphwxho.exeSize: 1.43 MB (1432064 bytes)
MD5: d1ca9e6791bacdc26a020903f3b587e6
Detection count: 50
File type: Executable File
Mime Type: unknown/exe
Path: %ALLUSERSPROFILE%
Group: Malware file
Last Updated: July 23, 2012
%ALLUSERSPROFILE%\hstvbldh.exe
File name: hstvbldh.exeSize: 6.2 MB (6203264 bytes)
MD5: cd79e7a8c3ebeb2cdbff948466444547
Detection count: 2
File type: Executable File
Mime Type: unknown/exe
Path: %ALLUSERSPROFILE%
Group: Malware file
Last Updated: September 10, 2012
%WINDIR%\system32\ctfmondjt.exe
File name: ctfmondjt.exeSize: 10.24 KB (10240 bytes)
MD5: fd7a983ed3c7b9dcce84774948917f98
Detection count: 85
File type: Executable File
Mime Type: unknown/exe
Path: %WINDIR%\system32
Group: Malware file
Last Updated: July 27, 2011
crypt16.exe
File name: crypt16.exeSize: 48.12 KB (48128 bytes)
MD5: 75257afed440d1fca858304e65a7be4b
Detection count: 62
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: December 11, 2009