Categories: Trojan

Dropped:Trojan.Generic.5044701 information

The Dropped:Trojan.Generic.5044701 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Dropped:Trojan.Generic.5044701 virus can do?

Drops a binary and executes it
Unconventionial language used in binary resources: Korean
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Deletes executed files from disk
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Dropped:Trojan.Generic.5044701?


File Info:
name: 5ABE72585B2E9204906B.mlwpath: /opt/CAPEv2/storage/binaries/37decd8ef2517303b586365f15d213ad2a3ee5390f3a970a4fb8ca202ad5aa95crc32: 1064382Cmd5: 5abe72585b2e9204906b5b21c6c83ec4sha1: f499f9d786bfdcebc6f05d3a3b887ba7c3d8e3e1sha256: 37decd8ef2517303b586365f15d213ad2a3ee5390f3a970a4fb8ca202ad5aa95sha512: e4e2f71e553697cc43ccf6df50056a97c049918c96918127e512bff049782cee1797b151c41e1b431cf4255cb55a7b535afe59229113f48d8468e9361469e3d1ssdeep: 24576:rWNF5RONZ3JTaAmY+FeGn6J5TojIc0UCDfVCIX9xTNQTkVs/G8dj9ib/VE33ycsp:WGZ3JT7/9Gn8ojIc0FCIX9xTNQTecG8ctype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1D7653343B6D0E53FE49817740CE922E3237AD4F0A7452397874B96F9A4642C92A3D36Fsha3_384: 08b95842dbcaacd9fb7b8c382761a22433ef11cd0e6ef21469111c4d8be535d10c0de9d61b53f7dbb7558b2d4d787381ep_bytes: e80a000000e97affffffcccccccccc8btimestamp: 2008-04-13 18:32:45
Version Info:
CompanyName: Microsoft CorporationFileDescription: Win32 Cabinet Self-Extractor                                           FileVersion: 6.00.2900.5512 (xpsp.080413-2105)InternalName: Wextract                LegalCopyright: (C)Microsoft Corporation. All rights reserved.OriginalFilename: WEXTRACT.EXE            ProductName: Microsoft(R) Windows(R) Operating SystemProductVersion: 6.00.2900.5512Translation: 0x0412 0x04b0

Dropped:Trojan.Generic.5044701 also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
MicroWorld-eScan	Dropped:Trojan.Generic.5044701
ClamAV	Win.Malware.Buzus-6981596-0
FireEye	Generic.mg.5abe72585b2e9204
CAT-QuickHeal	Trojan.Buzus.9827
Skyhigh	BehavesLike.Win32.Generic.tc
ALYac	Dropped:Trojan.Generic.5044701
Malwarebytes	Generic.Malware.AI.DDS
VIPRE	Dropped:Trojan.Generic.5044701
Sangfor	Suspicious.Win32.Save.ins
K7AntiVirus	Trojan ( 004c01941 )
K7GW	Trojan ( 004c01941 )
VirIT	Trojan.Win32.Generic.BKZK
Symantec	W32.Ackantta!Dr
ESET-NOD32	Win32/Merond.O
APEX	Malicious
Cynet	Malicious (score: 99)
Kaspersky	Virus.Win32.Cabres.a
BitDefender	Dropped:Trojan.Generic.5044701
NANO-Antivirus	Trojan.Win32.Buzus.btthy
Avast	Win32:Delf-NUF [Trj]
Emsisoft	Dropped:Trojan.Generic.5044701 (B)
F-Secure	Dropper.DR/Delphi.Gen
DrWeb	BackDoor.Poison.686
TrendMicro	WORM_PROLACO.SMX
Sophos	W32/Cabble-A
SentinelOne	Static AI – Suspicious SFX
GData	Dropped:Trojan.Generic.5044701
Jiangmin	Trojan/Buzus.aphr
Google	Detected
Avira	DR/Delphi.Gen
Antiy-AVL	Trojan/Win32.Buzus
Xcitium	Malware@#1pmcoyj0gvybg
Arcabit	Trojan.Generic.D4CF9DD
ZoneAlarm	Virus.Win32.Cabres.a
Microsoft	VirTool:Win32/DelfInject
Varist	W32/Trojan.TMKA-3154
McAfee	GenericRXAA-AA!5988F5EEA2E0
MAX	malware (ai score=89)
VBA32	Trojan.Buzus
Cylance	unsafe
Panda	Generic Suspicious
TrendMicro-HouseCall	WORM_PROLACO.SMX
Rising	Backdoor.Androm!8.113 (TFE:4:Ti79zbC6A2N)
Ikarus	Virus.Win32.DelfInject
MaxSecure	Virus.Win32.Cabres.A
Fortinet	W32/Injector.fam!tr
BitDefenderTheta	AI:Packer.DCFF6F721E
AVG	Win32:Delf-NUF [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (D)