Categories: Trojan

BScope.TrojanClicker.BAT.Agent (file analysis)

The BScope.TrojanClicker.BAT.Agent is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What BScope.TrojanClicker.BAT.Agent virus can do?

Yara rule detections observed from a process memory dump/dropped files/CAPE
Unconventionial language used in binary resources: Arabic (Saudi Arabia)
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Creates a copy of itself
Anomalous binary characteristics

How to determine BScope.TrojanClicker.BAT.Agent?


File Info:
name: 93406987C39BF736D386.mlwpath: /opt/CAPEv2/storage/binaries/8b8d15d8ad365b08c0f908f20223890c61e84e0c294ea3289969169620120dcbcrc32: AAA13AF6md5: 93406987c39bf736d3866045c8007982sha1: 88e02f3fa2d09c6dbff24a1a2949500fd1237d35sha256: 8b8d15d8ad365b08c0f908f20223890c61e84e0c294ea3289969169620120dcbsha512: 60dd6b5ab1b4c39e64517be3798902413d7dff8a33df4554aa3c324193a22fac9280ccad441988a9321313127587dae10a4db292a37c9c8e7dd963813e7cb2c2ssdeep: 6144:C6NNNG77KwAfGaP6UczT1LDtrr20jeEsLtPiCPKlcRd3qHRXkloTkUdtgHur/yRd:zC76fXP6UoTidBtbPnsHGlQtLgHuNyntype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1C2A4F1523AD4C135D25A153B99BAD3A1376B7C345B20C0877B503B6CAEB13D2AA3E713sha3_384: 963bbd41b85fa6401c3854317d31def5784e402fbc14840c9ef4b92988bfd0f728a7d49cf50dddee6c0651ff42a9733cep_bytes: 558becb9410000006a006a004975f953timestamp: 1970-01-01 00:00:00
Version Info:
0: [No Data]

BScope.TrojanClicker.BAT.Agent also known as:

Bkav	W32.AIDetect.malware1
Lionic	Trojan.Win32.Generic.lBJ1
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
FireEye	Generic.mg.93406987c39bf736
McAfee	GenericRXAA-AA!93406987C39B
Sangfor	Trojan.Win32.Wacatac.D8
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	TrojanDropper:Win32/Delphi.0e6ed81e
BitDefenderTheta	Gen:NN.ZelphiF.34212.EKZ@aWemXQbG
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
BitDefender	Trojan.GenericKD.44532642
MicroWorld-eScan	Trojan.GenericKD.44532642
Avast	Win32:Malware-gen
Tencent	Malware.Win32.Gencirc.114d8557
Ad-Aware	Trojan.GenericKD.44532642
DrWeb	Trojan.StartPage.40431
Emsisoft	Trojan.GenericKD.44532642 (B)
GData	Trojan.GenericKD.44532642
Jiangmin	Trojan/Genome.aoct
Avira	DR/Delphi.Gen
MAX	malware (ai score=83)
Microsoft	Trojan:Win32/Wacatac.B!ml
AhnLab-V3	Backdoor/Win32.Poison.C2946993
Acronis	suspicious
VBA32	BScope.TrojanClicker.BAT.Agent
ALYac	Trojan.GenericKD.44532642
Rising	Backdoor.Poison!1.A046 (RDMK:cmRtazo/lJup4IFLEwcE1WZjzQ8U)
SentinelOne	Static AI – Malicious PE
Fortinet	PossibleThreat.PALLAS.H
AVG	Win32:Malware-gen
Cybereason	malicious.7c39bf