Backdoor.Ircbot.AZ (file analysis)

The Backdoor.Ircbot.AZ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Backdoor.Ircbot.AZ virus can do?

• Sample contains Overlay data
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Creates a copy of itself
• Anomalous binary characteristics

How to determine Backdoor.Ircbot.AZ?

File Info:
name: 93FE3BFD4C88756168C5.mlw
path: /opt/CAPEv2/storage/binaries/9c7cb79efc8aeca378cfd3116b343fd7a7bfae82d872a02c588650398f224b85
crc32: A9DBD313
md5: 93fe3bfd4c88756168c558fc235f4032
sha1: f86b9ddfb4ba5851304594f53e717d0fdedeae82
sha256: 9c7cb79efc8aeca378cfd3116b343fd7a7bfae82d872a02c588650398f224b85
sha512: 142ba59c42b06c0a833b78f7b9be1243e994e82a707b5ce179c032f8218419eb5916dc5f0d6887d34ddf66e30e65dabd7b8d9afe7dc1e73943ce45a8ebf506ac
ssdeep: 3072:g0ybBonzUMiZ8oaM2RaszE29s0sMMvq3KmS1c5LRQRBlTPRxGWcGC11:gnbB4DHMFod+0P4q625RQRBlTP5C11
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1DDB3120ACAC4F29ED5C745BB28D9CE11E920E6E1BD721B5FB41C88667531E973C38839
sha3_384: 9de03b725ee71352f3fd9d98af75215eaaab7a46ebad399f2cc1d2f1d177c376739746385a8191b795c498c8fb231009
ep_bytes: 6055bd84560100955db940000000ebff
timestamp: 2005-08-18 13:54:22

Version Info:
0: [No Data]

Backdoor.Ircbot.AZ also known as:

How to remove Backdoor.Ircbot.AZ?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.