Categories: Trojan

What is “AIT:Trojan.Nymeria.1733 (B)”?

The AIT:Trojan.Nymeria.1733 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What AIT:Trojan.Nymeria.1733 (B) virus can do?

A file was accessed within the Public folder.
Sample contains Overlay data
Uses Windows utilities for basic functionality
Reads data out of its own binary image
CAPE extracted potentially suspicious content
Authenticode signature is invalid
Uses Windows utilities to create a scheduled task
Anomalous binary characteristics
Uses suspicious command line tools or Windows utilities
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine AIT:Trojan.Nymeria.1733 (B)?


File Info:
name: FBC7EE2024F61F278523.mlwpath: /opt/CAPEv2/storage/binaries/814ed27dec1ddffced940d4651d1326d69ee91371b839d53f2c8558368312c1acrc32: 416DD1C9md5: fbc7ee2024f61f27852343ad39314ac5sha1: e0c669a74b2f55f04fc28ac6ff2222fd5166820dsha256: 814ed27dec1ddffced940d4651d1326d69ee91371b839d53f2c8558368312c1asha512: 445d9abfe3eeebbb8da42dd3140e910f9b8d8b8f2bb4e0bd3c79684975f5b3c87268b7f306a972a5b92ec599df224d3948a6f7f6417351624da2298c816eca10ssdeep: 24576:lAHnh+eWsN3skA4RV1Hom2KXMmHaL49adu+vgOSU4UnPiT5m:Uh+ZkldoPK8YaLnRPumtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1FC85D042B3E5C0E6FE4AA6B79A15B6835B7C4D350533401E23D93DA9BE734B1032DA63sha3_384: 1d09c34bfa270271de3198689d5f00f1c57ad10b530a5716b207361f7723d77cb879e0a4728313101814b0870a55f91bep_bytes: e8c8d00000e97ffeffffcccccccccccctimestamp: 2019-02-06 23:03:41
Version Info:
FileDescription: NVIDIA Control Panel Application, 8.1.940.0OriginalFilename: NVIDIA Control Panel ApplicationCompanyName: NVIDIA CorporationFileVersion: ...LegalCopyright: (C) 2018 NVIDIA Corporation. All rights reserved.ProductName: NVIDIA Control PanelProductVersion: ...Translation: 0x0409 0x04b0

AIT:Trojan.Nymeria.1733 (B) also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.4!c
DrWeb	Trojan.AutoIt.321
Cynet	Malicious (score: 100)
FireEye	Generic.mg.fbc7ee2024f61f27
CAT-QuickHeal	Trojan.AutoIt.Downloader.ZZ
Malwarebytes	Generic.Malware.AI.DDS
Sangfor	Virus.Win32.Save.a
K7AntiVirus	Trojan ( 700000111 )
Alibaba	Trojan:Win32/AutInject.c6f2d3b4
K7GW	Trojan ( 700000111 )
Cybereason	malicious.024f61
BitDefenderTheta	AI:Packer.80DAC57717
Cyren	W32/AutoIt.IA.gen!Eldorado
Symantec	Trojan.Gen.2
Elastic	malicious (high confidence)
ESET-NOD32	multiple detections
TrendMicro-HouseCall	Trojan.AutoIt.CRYPTINJECT.SMA
ClamAV	Win.Malware.Remcos-7405884-0
Kaspersky	HEUR:Trojan.Script.Generic
BitDefender	AIT:Trojan.Nymeria.1733
MicroWorld-eScan	AIT:Trojan.Nymeria.1733
Avast	AutoIt:Injector-JF [Trj]
Tencent	Script.Trojan.Generic.Fajl
Sophos	Mal/AuItInj-A
F-Secure	Heuristic.HEUR/AGEN.1321297
VIPRE	AIT:Trojan.Nymeria.1733
TrendMicro	Trojan.AutoIt.CRYPTINJECT.SMA
McAfee-GW-Edition	BehavesLike.Win32.Generic.th
Emsisoft	AIT:Trojan.Nymeria.1733 (B)
SentinelOne	Static AI – Suspicious PE
GData	AIT:Trojan.Nymeria.1733 (2x)
Webroot	W32.Trojan.Gen
Avira	HEUR/AGEN.1321297
MAX	malware (ai score=81)
Antiy-AVL	GrayWare/Autoit.ShellCode.a
Arcabit	AIT:Trojan.Nymeria.D6C5 [many]
ZoneAlarm	HEUR:Trojan.Win32.Generic
Microsoft	VirTool:Win32/AutInject.CZ!bit
AhnLab-V3	Win-Trojan/AutoInj.Exp
Acronis	suspicious
VBA32	Trojan.MSIL.Crypt
TACHYON	Trojan/W32.Agent.1707016
Cylance	unsafe
Panda	Trj/CI.A
APEX	Malicious
Rising	Trojan.Injector/Autoit!1.BBE6 (CLASSIC)
Ikarus	Trojan.MSIL.NanoCore
MaxSecure	Trojan.Malware.1726719.susgen
Fortinet	W32/NDAoF.3AB864C6!tr
AVG	AutoIt:Injector-JF [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)