Categories: Backdoor

What is “Dropped:Backdoor.Generic.693269”?

The Dropped:Backdoor.Generic.693269 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Dropped:Backdoor.Generic.693269 virus can do?

Sample contains Overlay data
Uses Windows utilities for basic functionality
HTTPS urls from behavior.
Reads data out of its own binary image
Drops a binary and executes it
Authenticode signature is invalid
Attempts to modify proxy settings
Deletes executed files from disk
Creates known PcClient mutex and/or file changes.
Uses suspicious command line tools or Windows utilities
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Dropped:Backdoor.Generic.693269?


File Info:
name: 66F9E808878ACF52A6A4.mlwpath: /opt/CAPEv2/storage/binaries/fcd7319e11b5362e9a0defdd48fe96f6a38820826e5ecc8637c739010ad895bacrc32: AABE3E7Dmd5: 66f9e808878acf52a6a437c480231cb0sha1: a299713a8b5a4d89542c804d5a39b00e5d0e9ea0sha256: fcd7319e11b5362e9a0defdd48fe96f6a38820826e5ecc8637c739010ad895basha512: d081c45f61f8f329935e405291a84ab8442368160a24c3e1cade782d2397fdb6c8e133c34aa78ffe074283f1e5650198477696d5533d134cf542d9e64a2480a7ssdeep: 12288:2M9BjYANLlbmPC3i4D6ONNM4LcHdDDN5M6Lzp/+7M08InKbDR+Cfdlg0Cqj:B9CmbIg60vc9HN5bzp+QbDR+szg0Ztype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T157F42367BD128D2BD712083965F76934A57F3D40E8A8648F2B5C73398CBA4C7250E26Fsha3_384: ef7033a47d1cb1154dab4b45fde830ae9ee869a69e7f4e241f26d8070f3dd6583109f38076505924056670223b912b51ep_bytes: 81ec8001000053555633db57895c2418timestamp: 2008-05-03 14:08:38
Version Info:
0: [No Data]

Dropped:Backdoor.Generic.693269 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Magania.4!c
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
FireEye	Generic.mg.66f9e808878acf52
CAT-QuickHeal	Backdoor.Farfli.O
McAfee	Artemis!66F9E808878A
Cylance	unsafe
Sangfor	Dropper.Win32.Farfli.Vkue
K7AntiVirus	Adware ( 005524301 )
K7GW	Adware ( 005524301 )
Cybereason	malicious.a8b5a4
Arcabit	Backdoor.Generic.DA9415
Baidu	Win32.Trojan.Farfli.ap
VirIT	Trojan.Win32.KeyLogger.BJLG
Cyren	W32/Trojan.UCLW-5861
Symantec	Backdoor.Trojan
ESET-NOD32	multiple detections
APEX	Malicious
ClamAV	Win.Trojan.Agent-362817
Kaspersky	Trojan-GameThief.Win32.Magania.uasf
BitDefender	Dropped:Backdoor.Generic.693269
NANO-Antivirus	Trojan.Win32.KeyLogger.bskubm
MicroWorld-eScan	Dropped:Backdoor.Generic.693269
Avast	Win32:Farfli-AX [Trj]
Tencent	Win32.Trojan-GameThief.Magania.Zfow
Emsisoft	Dropped:Backdoor.Generic.693269 (B)
F-Secure	Backdoor.BDS/Farfli.kj.2
DrWeb	Trojan.KeyLogger.23952
VIPRE	Dropped:Backdoor.Generic.693269
TrendMicro	BKDR_ZEGOST.SMT
McAfee-GW-Edition	BehavesLike.Win32.Trojan.bc
Trapmine	suspicious.low.ml.score
Sophos	Generic Reputation PUA (PUA)
Ikarus	Trojan.SuspectCRC
Jiangmin	Trojan/PSW.Magania.aydk
Avira	TR/Dropper.Gen
Antiy-AVL	Trojan[GameThief]/Win32.Magania
Xcitium	TrojWare.Win32.Farfli.LK@4pmigc
Microsoft	TrojanDropper:Win32/Farfli.E
ViRobot	Trojan.Win.Z.Vrbrothers.724467
ZoneAlarm	not-a-virus:UDS:Downloader.Win32.VrBrothers.gen
GData	Win32.Adware.VrBrothers.C
Google	Detected
AhnLab-V3	Dropper/OnlineGameHack20.Gen
BitDefenderTheta	Gen:NN.ZedlaF.36722.gu8@a4T5YBbb
ALYac	Dropped:Backdoor.Generic.693269
MAX	malware (ai score=84)
VBA32	BScope.Trojan.Downloader
Malwarebytes	Generic.Malware.AI.DDS
TrendMicro-HouseCall	BKDR_ZEGOST.SMT
Rising	Backdoor.Farfli!1.6531 (CLASSIC)
Fortinet	Adware/VrBrothers
AVG	Win32:Farfli-AX [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)