Categories: Backdoor

What is “Backdoor:Win32/Farfli!pz”?

The Backdoor:Win32/Farfli!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Backdoor:Win32/Farfli!pz virus can do?

Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid
Yara detections observed in process dumps, payloads or dropped files

How to determine Backdoor:Win32/Farfli!pz?


File Info:
name: CD4AD9EF9538A974781C.mlwpath: /opt/CAPEv2/storage/binaries/8a70deb01fc6b4f888004bb873fdc79c53017aa3aa81836b8d1414e01120a895crc32: 760C1864md5: cd4ad9ef9538a974781c1e39c0787cf8sha1: 162149b115a0bacc09859c47934febb031211c38sha256: 8a70deb01fc6b4f888004bb873fdc79c53017aa3aa81836b8d1414e01120a895sha512: 1616679926b564b527ef333c56aa7b7fe428701323cf072d6c7f4d5a32f9e50687af9f2e0fc41ed3cef04930ce37082d9ec569e842dfbabf3868f6da260863c1ssdeep: 1536:1WmqoiBMNbMWtYNif/n9S91BF3frnoLwJYH5:1dWubF3n9S91BF3fbokJYH5type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windowstlsh: T1E9333A02EE8D88F5F145177038AA33B6953ABDE036996A931F53DDA5C87B370F12D242sha3_384: 5a874a790d656756f238f7f4288359205c61814ab6d01f0be1ed53ae742839bcca66d3bcd2bf6974d81899189ab43268ep_bytes: 558bec538b5d08568b750c578b7d1085timestamp: 2021-04-04 01:55:27
Version Info:
Comments: FreeEIMCompanyName: FEIM StudiosFileDescription: A Free Enterprise Instant MessengerFileVersion: 3, 5, 0, 1InternalName: freeeimLegalCopyright: Copyright (C) 2010 FEIM StudiosLegalTrademarks: OriginalFilename: freeeim.exePrivateBuild: ProductName: FreeEIMProductVersion: 3, 5, 0, 1SpecialBuild: Simple ChineseTranslation: 0x0804 0x04b0

Backdoor:Win32/Farfli!pz also known as:

Bkav	W32.AIDetectMalware
DrWeb	DLOADER.Trojan
MicroWorld-eScan	Generic.Dacic.D657E169.A.30358371
FireEye	Generic.mg.cd4ad9ef9538a974
CAT-QuickHeal	Trojan.FarfliPMF.S24804658
Skyhigh	BehavesLike.Win32.Generic.qh
McAfee	GenericRXMD-FS!CD4AD9EF9538
Malwarebytes	FlyStudio.Trojan.Packer.DDS
VIPRE	Generic.Dacic.D657E169.A.30358371
Sangfor	Trojan.Win32.Killer.swycb
K7AntiVirus	Trojan ( 005393cc1 )
K7GW	Trojan ( 005393cc1 )
CrowdStrike	win/malicious_confidence_100% (D)
BitDefenderTheta	Gen:NN.ZedlaF.36744.du8@aOc1Jmob
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Farfli.CNM
APEX	Malicious
ClamAV	Win.Malware.Farfli-9832713-0
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Generic.Dacic.D657E169.A.30358371
NANO-Antivirus	Trojan.Win32.Farfli.itoyyz
SUPERAntiSpyware	Adware.ChinAd/Variant
Avast	Win32:BackdoorX-gen [Trj]
Tencent	Trojan.Win32.Farfli.wa
Emsisoft	Generic.Dacic.D657E169.A.30358371 (B)
F-Secure	Trojan.TR/Downloader.Gen
Zillya	Trojan.Farfli.Win32.38565
Sophos	Troj/Farfli-EU
SentinelOne	Static AI – Malicious PE
MAX	malware (ai score=82)
GData	Win32.Trojan.Ghost.A
Jiangmin	Trojan.Generic.gvrxp
Webroot	W32.Adware.Gen
Google	Detected
Avira	TR/Downloader.Gen
Varist	W32/Farfli.CB.gen!Eldorado
Antiy-AVL	Trojan/Win32.Farfli
Kingsoft	malware.kb.a.868
Xcitium	TrojWare.Win32.TrojanDownloader.Redosdru.FG@6j5x7c
Arcabit	Generic.Dacic.D657E169.A.30358371
ZoneAlarm	HEUR:Trojan.Win32.Generic
Microsoft	Backdoor:Win32/Farfli!pz
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win.Generic.R414933
VBA32	Trojan.Farfli
ALYac	Generic.Dacic.D657E169.A.30358371
TACHYON	Trojan/W32.Agent.52224.AVZ
Cylance	unsafe
Panda	Trj/Genetic.gen
Rising	Backdoor.Gh0st!1.D1DA (CLASSIC)
Ikarus	Trojan.Win32.Redosdru
Fortinet	W32/Farfli.CNM!tr
AVG	Win32:BackdoorX-gen [Trj]
DeepInstinct	MALICIOUS