Categories: Malware

Dropped:Generic.BAT.Banker.2.76BE25A9 removal

The Dropped:Generic.BAT.Banker.2.76BE25A9 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Dropped:Generic.BAT.Banker.2.76BE25A9 virus can do?

Possible date expiration check, exits too soon after checking local time
The binary likely contains encrypted or compressed data.
Attempts to repeatedly call a single API many times in order to delay analysis time
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Dropped:Generic.BAT.Banker.2.76BE25A9?


File Info:
crc32: BC83114Dmd5: 273b0abb5644ebfabe9793479fd24327name: 273B0ABB5644EBFABE9793479FD24327.mlwsha1: ad8ea98c9e20f9581754edb8bdd1aba7ed0a8976sha256: 73805543bcb71c6916d0643728d1b51f54b65d8021b5982c82c0a6c562f607adsha512: 0b0e4ef99518a80bdb188ddb19d8b9a3013f8f4220f3bc1551e51182c88654ace16bacf0eeeefbec746288a17b3c15247b2f342dcb0cb2039340b842a6ca036dssdeep: 6144:e5aWbksiNTBsiO1LJjFLK12fZbaTkZIccvXhlKj6z87CNZPfF5hMN7zCb0+Jf1JM:e5atNT+iO1f6MZIcYhO32DPfPhMN3OvQtype: PE32 executable (console) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Dropped:Generic.BAT.Banker.2.76BE25A9 also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Trojan ( 0052c5631 )
Lionic	Trojan.BAT.Generic.4!c
Elastic	malicious (high confidence)
ALYac	Dropped:Generic.BAT.Banker.2.76BE25A9
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:BAT/Obfuscated.d3843a94
K7GW	Trojan ( 0052c5631 )
Cybereason	malicious.b5644e
Cyren	W32/Fuery.N.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	BAT/Obfuscated.T
APEX	Malicious
Avast	Win32:Trojan-gen
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.BAT.Generic
BitDefender	Dropped:Generic.BAT.Banker.2.76BE25A9
NANO-Antivirus	Trojan.Win32.Mlw.ipdfjz
MicroWorld-eScan	Dropped:Generic.BAT.Banker.2.76BE25A9
Tencent	Bat.Trojan.Generic.Hpsd
Ad-Aware	Dropped:Generic.BAT.Banker.2.76BE25A9
BitDefenderTheta	Gen:NN.ZexaF.34050.xuW@aabkyNc
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Ransom.fc
FireEye	Generic.mg.273b0abb5644ebfa
Sophos	Mal/Generic-S
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_99%
GData	Dropped:Generic.BAT.Banker.2.76BE25A9
AhnLab-V3	Malware/Win.Generic.C4548071
Acronis	suspicious
VBA32	Trojan.Fuerboos
MAX	malware (ai score=84)
TrendMicro-HouseCall	TROJ_GEN.R002C0WDJ21
Ikarus	Trojan.BAT.KillAV
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	BAT/Generic!tr
AVG	Win32:Trojan-gen
Paloalto	generic.ml
Qihoo-360	Win32/Trojan.Generic.HgIASQUA