Categories: Malware

Generik.KOAUCGM information

The Generik.KOAUCGM is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generik.KOAUCGM virus can do?

Attempts to connect to a dead IP:Port (3 unique times)
A process attempted to delay the analysis task.
A process created a hidden window
Drops a binary and executes it
Unconventionial language used in binary resources: Chinese (Simplified)
Uses Windows utilities for basic functionality
Sniffs keystrokes
Deletes its original binary from disk
Installs itself for autorun at Windows startup
Likely virus infection of existing system binary
Creates a copy of itself
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

ggteam2024.gnway.cc

ip2.nwt.gg-team.net

love2024.vicp.cc

a.tomx.xyz

How to determine Generik.KOAUCGM?


File Info:
crc32: 6BE53FB5md5: 06a2c36bce309fa089a24b540f73a765name: 06A2C36BCE309FA089A24B540F73A765.mlwsha1: 1b0d723580db8e9ec473beb58c6c5a91682f2337sha256: 463ea7a64c4a27979bcf30c5f2b24b83c70fe356991e3760bf0cf4a8e37924absha512: 4fe8e8b28c49cd0906112052b4479f1703fcffa43698a0bdcbbfe59c1f31bfe235d9f30194649b5ff013593cde84775b7dedf291c59b3ec99169ca23fe4b3f07ssdeep: 6144:2BDHmrz4niNy8o3Zp/TWt+g4RQTDUBO8/2vh+ziDV8m56TBac2Gu0:wDHmoniNy8L8g4RgoBO8/2vhDX56TXtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: Microsoft Corporation. All rights reserved.InternalName: FileVersion: 2.3.1.0CompanyName: Microsoft CorporationLegalTrademarks: ProductName: ProductVersion: 2.3.1.0FileDescription: Microsoft .NET Framework 2.3.1.0OriginalFilename: Translation: 0x0409 0x04e4

Generik.KOAUCGM also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Trojan ( 7000000f1 )
Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
DrWeb	Trojan.DownLoader33.21631
ClamAV	Win.Keylogger.Delf-9629510-0
ALYac	Gen:Trojan.Keylogger.ZG3@aaCHNQcj
Malwarebytes	Trojan.Crypt
Zillya	Trojan.Delf.Win32.121059
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:Win32/Ymacco.345
K7GW	Trojan ( 7000000f1 )
Cybereason	malicious.bce309
Baidu	Win32.Trojan.Delf.ae
Cyren	W32/Delf.XFNF-6995
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Generik.KOAUCGM
APEX	Malicious
Avast	Win32:Malware-gen
Cynet	Malicious (score: 100)
Kaspersky	UDS:Trojan.Win32.Generic
BitDefender	Gen:Trojan.Keylogger.ZG3@aaCHNQcj
NANO-Antivirus	Trojan.Win32.Delf.hlqubu
MicroWorld-eScan	Gen:Trojan.Keylogger.ZG3@aaCHNQcj
Tencent	Malware.Win32.Gencirc.10b9c4c1
Ad-Aware	Gen:Trojan.Keylogger.ZG3@aaCHNQcj
Sophos	Mal/Generic-R + Mal/SpyAgent-F
Comodo	TrojWare.Win32.Spy.Banker.Gen@1qlojk
BitDefenderTheta	AI:Packer.4899FE9C1C
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.R002C0PFG21
McAfee-GW-Edition	BehavesLike.Win32.Generic.ct
FireEye	Generic.mg.06a2c36bce309fa0
Emsisoft	Gen:Trojan.Keylogger.ZG3@aaCHNQcj (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.Generic.ezuqc
Avira	BDS/Backdoor.Gen
Antiy-AVL	Trojan/Generic.ASMalwS.BBB0DE
Microsoft	Trojan:Win32/Ymacco.AA63
GData	Gen:Trojan.Keylogger.ZG3@aaCHNQcj
AhnLab-V3	Backdoor/Win32.Agent.R115864
McAfee	GenericRXLT-DC!06A2C36BCE30
MAX	malware (ai score=87)
VBA32	BScope.Trojan.Wacatac
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	TROJ_GEN.R002C0PFG21
Rising	Trojan.Delf!1.6515 (CLASSIC)
Yandex	Trojan.Delf!JfpIl4D2VlE
Ikarus	Trojan-Spy.Win32.Dibik
Fortinet	W32/Delf.NWT!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml