Categories: Trojan

AIT:Trojan.Nymeria.559 information

The AIT:Trojan.Nymeria.559 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What AIT:Trojan.Nymeria.559 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Yara rule detections observed from a process memory dump/dropped files/CAPE
Creates RWX memory
Dynamic (imported) function loading detected
Performs HTTP requests potentially not found in PCAP.
Enumerates running processes
Authenticode signature is invalid
Attempts to modify proxy settings
Harvests cookies for information gathering

How to determine AIT:Trojan.Nymeria.559?


File Info:
name: BC891B966831D2D9BBA5.mlwpath: /opt/CAPEv2/storage/binaries/9a1241413daaa82f5ccd5d21e5fbd34ad68f059c753c70e123a7c8d59d636ee6crc32: 83B6AB0Fmd5: bc891b966831d2d9bba5f9914b87b19dsha1: 56d16f24e5152292298faa556400a1afefba858csha256: 9a1241413daaa82f5ccd5d21e5fbd34ad68f059c753c70e123a7c8d59d636ee6sha512: f61d46fae4b4fe387733a013a555dc986cfb8c8ec82da7e63c2bbf5962c350586e885bbc9c5efe3b80aee38af8e679afd01a2ee6996539ae995ebf88e880c742ssdeep: 12288:Stb20Qc3lT7af41ePBRYuQLKpqeUhbTv5OFgNuPPpHSgaY7X76A:Stb20pkaCqT5TBWgNQ7aYX76Atype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1C3059E1373DD8361C3B25273BA25B701BEBF782506A5F96B2FD4093DE920122525EA73sha3_384: 5cefbc86d249e47a9174482286a632ecd34f290139316cda40f6c59c0c7cf6604c6e6538789360546535f53ea63e9ba1ep_bytes: e86ace0000e97ffeffffcccc57568b74timestamp: 2016-07-05 18:07:16
Version Info:
Translation: 0x0809 0x04b0

AIT:Trojan.Nymeria.559 also known as:

Lionic	Trojan.Script.Generic.4!c
MicroWorld-eScan	AIT:Trojan.Nymeria.559
FireEye	AIT:Trojan.Nymeria.559
McAfee	RDN/Generic Downloader.x
Cylance	Unsafe
BitDefender	AIT:Trojan.Nymeria.559
Cybereason	malicious.66831d
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of Win32/TrojanDownloader.Autoit.OCJ
APEX	Malicious
Alibaba	TrojanDownloader:Script/Generic.7b3c4a03
Avast	FileRepMalware
Ad-Aware	AIT:Trojan.Nymeria.559
BitDefenderTheta	AI:Packer.6A489FE616
TrendMicro	TROJ_GEN.R049C0PL621
McAfee-GW-Edition	BehavesLike.Win32.Dropper.ch
Emsisoft	AIT:Trojan.Nymeria.559 (B)
Avira	HEUR/AGEN.1207790
MAX	malware (ai score=86)
ViRobot	Trojan.Win32.Z.Nymeria.860672.A
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 99)
TrendMicro-HouseCall	TROJ_GEN.R049C0PL621
Yandex	Trojan.Agent.Gen.QS
Ikarus	Trojan-Downloader.Win32.AutoIt
Fortinet	W32/Agent.OCJ!tr.dldr
AVG	FileRepMalware
CrowdStrike	win/malicious_confidence_80% (W)