Categories: Backdoor

Backdoor.NetMail malicious file

The Backdoor.NetMail is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Backdoor.NetMail virus can do?

Reads data out of its own binary image
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Backdoor.NetMail?


File Info:
name: 03EAC2FFA428488B4A67.mlwpath: /opt/CAPEv2/storage/binaries/659f1c97a3294046a9a2a148d2d2419fc363a5375406850d859ba971c8b84ca6crc32: E07121CEmd5: 03eac2ffa428488b4a6772462cc5cc6csha1: 3e88dc8b6fc0d48fe94f203040cf47fb8c78259csha256: 659f1c97a3294046a9a2a148d2d2419fc363a5375406850d859ba971c8b84ca6sha512: e6f9960fb1903813524b9f3b23e570258e8d1f8fee28ae3ec3c7b49af3d010cb790b12353f5d6138e8220fa0bc2c70c29d455923e9a041cd32c9fe0ac4b48258ssdeep: 12288:i2ToLD2QfWUEknSsmjj/UVF4TsSTEP/NkpflHTjMVJK1P5aEL3MK0Kyhx:ikuPfWsnnw/UV+sSTEtKMVcRadY2type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T135254B3BAF8A9136D96234FC8D9FC0D5940939312C485B87FF919F0D7E76652232A983sha3_384: 4a590bc1888549a6d3b9daffe96470dd0cca454916260940433d9a1cbcd4a2307994603a2d7a846aec8b8bc39d2ad8ffep_bytes: 558bec83c4f05356b81c991100e83ad3timestamp: 1992-06-19 22:22:17
Version Info:
0: [No Data]

Backdoor.NetMail also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Doina.46553
FireEye	Generic.mg.03eac2ffa428488b
McAfee	GenericRXIE-DJ!03EAC2FFA428
Malwarebytes	Malware.AI.693497512
Zillya	Trojan.Banker.Win32.53195
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Spyware ( 004bfe9d1 )
K7GW	Spyware ( 004bfe9d1 )
Cybereason	malicious.fa4284
Arcabit	Trojan.Doina.DB5D9
BitDefenderTheta	Gen:NN.ZelphiF.36164.8GW@auv89co
Cyren	W32/Banker.V.gen!Eldorado
ESET-NOD32	Win32/Spy.Banker.WGA
APEX	Malicious
ClamAV	Win.Trojan.Netmail-9844910-0
Kaspersky	Backdoor.Win32.NetMail.a
BitDefender	Gen:Variant.Doina.46553
NANO-Antivirus	Trojan.Win32.NetMail.cndhca
Avast	Win32:Trojan-gen
Tencent	Backdoor.Win32.NetMail.ha
TACHYON	Trojan/W32.DP-Agent.988160
Emsisoft	Gen:Variant.Doina.46553 (B)
F-Secure	Trojan.TR/Zusy.9881605548
DrWeb	Trojan.DownLoader4.61273
VIPRE	Gen:Variant.Doina.46553
TrendMicro	Backdoor.Win32.NETMAIL.SMTH
McAfee-GW-Edition	BehavesLike.Win32.PWSBanker.dh
Trapmine	suspicious.low.ml.score
Sophos	Troj/Agent-BCNT
SentinelOne	Static AI – Malicious PE
Jiangmin	Backdoor/NetMail.a
Google	Detected
Avira	TR/Zusy.9881605548
Antiy-AVL	Trojan[Backdoor]/Win32.NetMail
Xcitium	TrojWare.Win32.Spy.Banker.VIS@8ekceg
Microsoft	Trojan:Win32/Dorv.B!rfn
ZoneAlarm	Backdoor.Win32.NetMail.a
GData	Win32.Trojan-Stealer.Banker.AK
Cynet	Malicious (score: 100)
AhnLab-V3	Backdoor/Win32.NetMail.C3359984
VBA32	Backdoor.NetMail
ALYac	Gen:Variant.Doina.46553
MAX	malware (ai score=85)
Cylance	unsafe
Panda	Trj/Dtcontx.I
Zoner	Trojan.Win32.88740
TrendMicro-HouseCall	Backdoor.Win32.NETMAIL.SMTH
Yandex	Trojan.GenAsa!Dt9naGN/FsA
Ikarus	Trojan-Spy.Zbot
Fortinet	W32/Banker.WGA!tr.spy
AVG	Win32:Trojan-gen
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_90% (D)