Categories: Malware

AIT.Heur2.Miner.1.699EF0F0.Gen information

The AIT.Heur2.Miner.1.699EF0F0.Gen is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What AIT.Heur2.Miner.1.699EF0F0.Gen virus can do?

Executed a command line with /C or /R argument to terminate command shell on completion which can be used to hide execution
Uses Windows utilities for basic functionality
Performs HTTP requests potentially not found in PCAP.
Authenticode signature is invalid
A ping command was executed with the -n argument possibly to delay analysis
Attempts to modify proxy settings
Deletes executed files from disk
Touches a file containing cookies, possibly for information gathering
Uses suspicious command line tools or Windows utilities
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine AIT.Heur2.Miner.1.699EF0F0.Gen?


File Info:
name: C78DFC1D5E84FE57CFB7.mlwpath: /opt/CAPEv2/storage/binaries/d47ca4876cb59693e80a6bbdd1a97d896925fcf51d8e662ee44ba7d66a66c3e9crc32: 7B58406Dmd5: c78dfc1d5e84fe57cfb7e4bffb373eafsha1: f1ca721f4463f9ff4322bb9328dfdc87762ca84csha256: d47ca4876cb59693e80a6bbdd1a97d896925fcf51d8e662ee44ba7d66a66c3e9sha512: 6e88298db30529bcddbdcd72993f650c952a4f84d08e838198d7f90ad190687828baa95578d8d227ac7f67e9f21d9a6dcddf3cec525fe82a4360ed5f1453858bssdeep: 24576:YAHnh+eWsN3skA4RV1Hom2KXMmHaJDz5:fh+ZkldoPK8YaJhtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T129058B0273D1C036FFABA2739B6AF64156BC79254133852F13981DB9BD701B2263E663sha3_384: ef83cea240c1c743fca7e7c64354d2628462ff8ecfd9c2c4b5e58267fd8f77a0c6ca97ec41d94fb39e0689fb988fb197ep_bytes: e8c8d00000e97ffeffffcccccccccccctimestamp: 2019-12-01 15:28:22
Version Info:
Translation: 0x0809 0x04b0

AIT.Heur2.Miner.1.699EF0F0.Gen also known as:

Lionic	Trojan.Win32.Generic.a!c
MicroWorld-eScan	AIT.Heur2.Miner.1.699EF0F0.Gen
Skyhigh	BehavesLike.Win32.Ransomware.ch
McAfee	Artemis!C78DFC1D5E84
Malwarebytes	Generic.Malware/Suspicious
Sangfor	Trojan.Win32.AGEN.1030766
K7AntiVirus	Trojan-Downloader ( 0055dc7e1 )
BitDefender	AIT.Heur2.Miner.1.699EF0F0.Gen
K7GW	Trojan-Downloader ( 0055dc7e1 )
CrowdStrike	win/malicious_confidence_100% (W)
VirIT	Trojan.Win32.Dnldr33.CEMX
Symantec	Trojan.Gen.MBT
Elastic	malicious (moderate confidence)
ESET-NOD32	a variant of Win32/TrojanDownloader.Autoit.OVM
Cynet	Malicious (score: 100)
APEX	Malicious
Kaspersky	UDS:Trojan-Downloader.Win32.Generic
Alibaba	Trojan:Win32/Autoit.ali2000008
NANO-Antivirus	Trojan.Win32.Autoit.gucjnh
Rising	Downloader.Agent/Autoit!1.D403 (CLASSIC)
Sophos	Mal/Generic-S
DrWeb	Trojan.DownLoader32.46204
VIPRE	AIT.Heur2.Miner.1.699EF0F0.Gen
TrendMicro	TrojanSpy.AutoIt.AZORULT.SM
FireEye	AIT.Heur2.Miner.1.699EF0F0.Gen
Emsisoft	AIT.Heur2.Miner.1.699EF0F0.Gen (B)
Ikarus	Trojan-Downloader.Win32.AutoIt
Antiy-AVL	Trojan[Downloader]/Autoit.Inetget.a
Microsoft	Trojan:Win32/Tiggre!rfn
Xcitium	Malware@#1sfmfq3xs33qu
Arcabit	AIT.Heur2.Miner.1.699EF0F0.Gen [many]
ZoneAlarm	UDS:Trojan-Downloader.Win32.Generic
GData	AIT.Heur2.Miner.1.699EF0F0.Gen (2x)
Google	Detected
AhnLab-V3	Malware/Win32.Generic.C3860023
VBA32	Trojan-Downloader.Autoit.gen
ALYac	AIT.Heur2.Miner.1.699EF0F0.Gen
MAX	malware (ai score=100)
DeepInstinct	MALICIOUS
Cylance	unsafe
Panda	Trj/CI.A
TrendMicro-HouseCall	TrojanSpy.AutoIt.AZORULT.SM
Tencent	Win32.Trojan.Agen.Uimw
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.7175239.susgen
Fortinet	W32/Generic!tr.dldr
AVG	Win32:Malware-gen
Cybereason	malicious.f4463f
Avast	Win32:Malware-gen