What is "Backdoor.Win32.Mokes.alpx"?

The Backdoor.Win32.Mokes.alpx is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Backdoor.Win32.Mokes.alpx virus can do?

Executable code extraction
Injection (inter-process)
Injection (Process Hollowing)
Creates RWX memory
A process created a hidden window
Unconventionial language used in binary resources: Norwegian (Nynorsk)
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Executed a process and injected code into it, probably while unpacking
Detects Sandboxie through the presence of a library
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Backdoor.Win32.Mokes.alpx?


File Info:
crc32: 85B07759
md5: 824a758a42667f37bfa0380413032517
name: 824A758A42667F37BFA0380413032517.mlw
sha1: 6e54821ff587793276584cc7605e0eeb9594b75f
sha256: 4b6b23a0e4918f254d84f95df96c280e42c7addf4315315176980d7cfb858824
sha512: 634472f8af5c01d86d145cd9fb9bb6dbae27afff4ce6eaa7ac0cd34794326cbf10f5b49f6e50abb0ed54d5e9bca732267630abc352a3f7ae5b1bffe8c3b7049d
ssdeep: 3072:XfYIIfAOJRcRAuxVBUbt3gkMbWGMKORZMkHIePIpWVPs:GfAqRcx/UZQEGMKqqLOv
type: PE32 executable (GUI) Intel 80386 system file, for MS Windows, UPX compressed

Version Info:
InternalName: triwilbifog.acs
FileVersion: 6.26.361
Copyright: Copyrighz (C) 2020, vodkafug
ProductVersion: 1.0.2
TranslationUsa: 0x0273 0x04d3

Backdoor.Win32.Mokes.alpx also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.35944747
McAfee	GenericRXAA-AA!824A758A4266
Malwarebytes	Trojan.MalPack.GS
K7AntiVirus	Riskware ( 0040eff71 )
K7GW	Riskware ( 0040eff71 )
CrowdStrike	win/malicious_confidence_100% (D)
Arcabit	Trojan.Generic.D224792B
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Kaspersky	Backdoor.Win32.Mokes.alpx
BitDefender	Trojan.GenericKD.35944747
Paloalto	generic.ml
Ad-Aware	Trojan.GenericKD.35944747
Sophos	ML/PE-A
McAfee-GW-Edition	BehavesLike.Win32.Trojan.cc
Emsisoft	Trojan.GenericKD.35944747 (B)
Avira	TR/AD.SmokeLoader.cmlwm
ZoneAlarm	Backdoor.Win32.Mokes.alpx
GData	Trojan.GenericKD.35944747
Cynet	Malicious (score: 100)
BitDefenderTheta	Gen:NN.ZexaF.34700.mmKfaSF4YmkG
ALYac	Trojan.GenericKD.35944747
MAX	malware (ai score=82)
Cylance	Unsafe
ESET-NOD32	a variant of Win32/Kryptik.HIMI
SentinelOne	Static AI – Malicious PE
Fortinet	W32/Kryptik.HIFA!tr
AVG	Win32:DropperX-gen [Drp]
Cybereason	malicious.ff5877
Qihoo-360	HEUR/QVM11.1.4FD7.Malware.Gen

How to remove Backdoor.Win32.Mokes.alpx?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

What is “Backdoor.Win32.Mokes.alpx”?