Categories: Malware

What is “BigHead.11”?

The BigHead.11 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What BigHead.11 virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid
CAPE detected the StormKitty malware family
Binary file triggered multiple YARA rules
Binary compilation timestomping detected

How to determine BigHead.11?


File Info:
name: 95AC9B688B9A0F44DFC6.mlwpath: /opt/CAPEv2/storage/binaries/26dd9aaa789ea54bf92a33d927c4d6e3d8cb7e9f706e38566ae4298e244032dccrc32: 2A731860md5: 95ac9b688b9a0f44dfc6c05fa689e2cbsha1: 7e5c18e76b0ba8046d533d63daa0e0ecafbccbc8sha256: 26dd9aaa789ea54bf92a33d927c4d6e3d8cb7e9f706e38566ae4298e244032dcsha512: 8d704868c9ac9b1c38a45661124fe274cb0be6a948b783967c974db9436bd3831d8e05274d52cf8880e6ff65afdc74d07aa10886a66cc369df5f4b33c6151a14ssdeep: 3072:7+STW8djpN6izj8mZwUEFBgLxqIPu/29bUJ2cQh+xws6+Wpv:I8XN6W8mmPgtXPS29bAGtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T12404391437E81929E3FF9FB8F4B002258B72F423A513D76F199468EE1D62744E520BB6sha3_384: 0c5ebcfb7e507a5c3adf17f63c20f1404cbf0de2c5b08f7a9bb9aa43e782320910d2f63b776fc7e4ec3ae51beea6438bep_bytes: ff250020400000000000000000000000timestamp: 2069-10-12 02:06:25
Version Info:
Translation: 0x0000 0x04b0Comments: CompanyName: FileDescription: ClientFileVersion: 1.0.0.0InternalName: Client.exeLegalCopyright: Copyright ©  2021LegalTrademarks: OriginalFilename: Client.exeProductName: ClientProductVersion: 1.0.0.0Assembly Version: 1.0.0.0

BigHead.11 also known as:

Bkav	W32.AIDetectMalware.CS
Lionic	Trojan.Win32.Stealer.12!c
AVG	Win32:CrypterX-gen [Trj]
Elastic	Windows.Generic.Threat
DrWeb	Trojan.PWS.Stealer.35217
MicroWorld-eScan	Gen:Variant.BigHead.11
FireEye	Generic.mg.95ac9b688b9a0f44
CAT-QuickHeal	Trojan.YakbeexMSIL.ZZ4
Skyhigh	BehavesLike.Win32.Generic.cm
McAfee	Trojan-FRAX!95AC9B688B9A
Malwarebytes	Generic.Trojan.MSIL.DDS
Zillya	Trojan.Agent.Win32.2559217
Sangfor	Virus.Win32.Save.a
Alibaba	Backdoor:MSIL/AsyncRAT.e988f1b1
CrowdStrike	win/malicious_confidence_100% (W)
BitDefenderTheta	Gen:NN.ZemsilF.36802.km0@am9xkdm
VirIT	Trojan.Win32.MSIL_Heur.B
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Agent.DWJ
APEX	Malicious
ClamAV	Win.Packed.AsyncRAT-9856570-1
Kaspersky	HEUR:Trojan-PSW.MSIL.Stealer.gen
BitDefender	Gen:Variant.BigHead.11
NANO-Antivirus	Trojan.Win32.Stealer.jwodnh
SUPERAntiSpyware	Trojan.Agent/Gen-Dropper
Avast	Win32:CrypterX-gen [Trj]
Tencent	Backdoor.MSIL.Crysan.haa
Emsisoft	Gen:Variant.BigHead.11 (B)
F-Secure	Heuristic.HEUR/AGEN.1365342
VIPRE	Gen:Variant.BigHead.11
Sophos	Mal/AsyncRat-C
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.MSIL.aeqkq
Avira	HEUR/AGEN.1365342
MAX	malware (ai score=87)
Antiy-AVL	Trojan/MSIL.Agent
Kingsoft	malware.kb.c.988
Microsoft	Backdoor:MSIL/AsyncRat!atmn
Arcabit	Trojan.BigHead.11
ZoneAlarm	HEUR:Trojan-PSW.MSIL.Stealer.gen
GData	MSIL.Backdoor.DCRat.D
Varist	W32/MSIL_Agent.BTI.gen!Eldorado
AhnLab-V3	Trojan/Win.FRAX.C4568360
Acronis	suspicious
VBA32	Trojan.MSIL.InfoStealer.gen.D
ALYac	Gen:Variant.BigHead.11
TACHYON	Backdoor/W32.DN-Crysan.174080.CR
Cylance	unsafe
Panda	Trj/CI.A
Rising	Stealer.Agent!1.D483 (CLASSIC)
Yandex	Trojan.Shelpak!LFzpHN9OKus
Ikarus	Trojan.MSIL.PSW
MaxSecure	Trojan.Malware.103650238.susgen
Fortinet	MSIL/Agent.RXP!tr.pws
Cybereason	malicious.88b9a0
DeepInstinct	MALICIOUS
alibabacloud	Backdoor:MSIL/AsyncRAT.Stub.GG!MTB