Categories: Trojan

AIT:Trojan.Nymeria.81 (B) malicious file

The AIT:Trojan.Nymeria.81 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What AIT:Trojan.Nymeria.81 (B) virus can do?

Attempts to connect to a dead IP:Port (1 unique times)
Creates RWX memory
Reads data out of its own binary image
Drops a binary and executes it
Uses Windows utilities for basic functionality
Sniffs keystrokes
Installs itself for autorun at Windows startup
Attempts to disable UAC
Attempts to modify UAC prompt behavior

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine AIT:Trojan.Nymeria.81 (B)?


File Info:
crc32: 7576B64Amd5: 952dc0e8c6314d594c24849cc65f5f8ename: 952DC0E8C6314D594C24849CC65F5F8E.mlwsha1: 93ac8ac80d2f776ead8f9da82e77071a40c866d1sha256: d2b9204495e9e93cb657aab768fe01b559ba4effd9f4a200f0369693c2a3f37csha512: b61865c401789fe4eb3e9443e6873afdda9e466e2bdb547b5077d7c706e1920eac61e5142aa183f1617d538ac32d460c312b7a40a2eb3a8ed5478f3ca050eeb7ssdeep: 24576:a4lavt0LkLL9IMixoEgeabnocuq9MmCS:tkwkn9IMHeabnoPaPCStype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
Translation: 0x0809 0x04b0

AIT:Trojan.Nymeria.81 (B) also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
DrWeb	Trojan.DownLoader11.33994
MicroWorld-eScan	AIT:Trojan.Nymeria.81
CAT-QuickHeal	TrojanPWS.AutoIt.Zbot.S
McAfee	Dropper-AutoIt.e
Malwarebytes	Backdoor.Bladabindi.AutoIt
Sangfor	Malware
BitDefender	AIT:Trojan.Nymeria.81
Cybereason	malicious.8c6314
Arcabit	AIT:Trojan.Nymeria.81
BitDefenderTheta	AI:Packer.4A7CAE7C15
Cyren	W32/AutoIt.EZ.gen!Eldorado
Symantec	Backdoor.Ratenjay
APEX	Malicious
Kaspersky	Trojan-Dropper.Win32.Autoit.bpz
NANO-Antivirus	Trojan.Script.AutoIt.dcckyk
Avast	AutoIt:Runner-AN [Trj]
Ad-Aware	AIT:Trojan.Nymeria.81
Emsisoft	AIT:Trojan.Nymeria.81 (B)
F-Secure	Heuristic.HEUR/AGEN.1134155
Baidu	Win32.Trojan-Dropper.Autoit.c
McAfee-GW-Edition	BehavesLike.Win32.DownloaderAutoIt.ch
FireEye	Generic.mg.952dc0e8c6314d59
Sophos	ML/PE-A + Troj/Autoit-BIF
Ikarus	Trojan-Dropper.Win32.Autoit
MaxSecure	Trojan.Malware.300983.susgen
Avira	HEUR/AGEN.1134155
MAX	malware (ai score=89)
Microsoft	Program:Win32/Wacapew.C!ml
ZoneAlarm	Trojan-Dropper.Win32.Autoit.bpz
GData	AIT:Trojan.Nymeria.81 (2x)
Cynet	Malicious (score: 100)
AhnLab-V3	Dropper/Win32.RL_Autoit.R277886
ALYac	AIT:Trojan.Nymeria.81
Cylance	Unsafe
ESET-NOD32	multiple detections
eGambit	Unsafe.AI_Score_74%
Fortinet	W32/Autoit.AWL!tr
AVG	AutoIt:Runner-AN [Trj]
CrowdStrike	win/malicious_confidence_80% (D)
Qihoo-360	HEUR/QVM10.1.057B.Malware.Gen