Categories: Backdoor

Backdoor.Win32.Konus.sf information

The Backdoor.Win32.Konus.sf is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Backdoor.Win32.Konus.sf virus can do?

Executable code extraction
Creates RWX memory
The binary likely contains encrypted or compressed data.
Queries information on disks, possibly for anti-virtualization
Network activity detected but not expressed in API logs

How to determine Backdoor.Win32.Konus.sf?


File Info:
crc32: 347B4A1Emd5: f5fb35e6942d61210079c3ea5a51493ename: F5FB35E6942D61210079C3EA5A51493E.mlwsha1: 6ddbb9e84ed595781814eadf07ec65e35350ab79sha256: 1aa2009bf625cdd1f9fce70863201c2c9fc8624edd89103fda2e49b50ba908f7sha512: 91856dec3eaa6418a1ea19d0094a27f11e25fc8c6e47492149e1f7bc7a22314e850f38a6104e5a130b99c4c18d44a50a0403ccb4c4bef6e72c73e6c51e978b37ssdeep: 12288:rXPcLcbGfVylwG/ZDCK/ScBXo8TsyMkKMY8m7WOK9HATTsx/SA/WegYfdNbrqnu:rXh6XcBXo8TsL8Y8muATTySA/DrfdNbtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Backdoor.Win32.Konus.sf also known as:

Bkav	W32.AIDetectGBM.malware.02
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Heur.Mint.Zard.25
FireEye	Generic.mg.f5fb35e6942d6121
McAfee	GenericRXNP-XC!F5FB35E6942D
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Spyware ( 00539c471 )
BitDefender	Gen:Heur.Mint.Zard.25
K7GW	Spyware ( 00539c471 )
Cybereason	malicious.6942d6
BitDefenderTheta	AI:Packer.10C3B9AA1E
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Trojan-gen
Kaspersky	Backdoor.Win32.Konus.sf
NANO-Antivirus	Trojan.Win32.Konus.ilrxvn
Ad-Aware	Gen:Heur.Mint.Zard.25
Emsisoft	Gen:Heur.Mint.Zard.25 (B)
F-Secure	Heuristic.HEUR/AGEN.1116604
DrWeb	Trojan.PWS.Banker1.36652
Zillya	Backdoor.Konus.Win32.70
McAfee-GW-Edition	BehavesLike.Win32.Generic.gc
Sophos	Mal/Generic-R + Troj/Konus-A
SentinelOne	Static AI – Malicious PE
Jiangmin	Backdoor.Konus.ch
eGambit	Unsafe.AI_Score_98%
Avira	HEUR/AGEN.1116604
Antiy-AVL	Trojan[Backdoor]/Win32.Konus
Microsoft	Backdoor:Win32/Konus.A
Gridinsoft	Trojan.Win32.Agent.oa!s1
Arcabit	Trojan.Mint.Zard.25
ZoneAlarm	Backdoor.Win32.Konus.sf
GData	Gen:Heur.Mint.Zard.25
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.RL_Banker.R277924
Acronis	suspicious
VBA32	TScope.Malware-Cryptor.SB
MAX	malware (ai score=86)
Malwarebytes	Malware.AI.4083686688
Panda	Trj/GdSda.A
ESET-NOD32	a variant of Win32/Spy.Kronosbot.A
Rising	Backdoor.Konus!8.AC8 (TFE:4:AZHb6kQpy7P)
Ikarus	Trojan.Win32.Agent
MaxSecure	Trojan.Malware.114274721.susgen
AVG	Win32:Trojan-gen
CrowdStrike	win/malicious_confidence_80% (D)
Qihoo-360	HEUR/QVM20.1.80C5.Malware.Gen