Crack

HackTool.Flooder (file analysis)

Malware Removal

The HackTool.Flooder is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What HackTool.Flooder virus can do?

  • CAPE extracted potentially suspicious content
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid

How to determine HackTool.Flooder?


File Info:

name: 838F67D7A4B6824EC598.mlw
path: /opt/CAPEv2/storage/binaries/10b3addcd8d4ac13a05391a939b334d0a2f7586e34be79c3a89812c958cc7a5c
crc32: 63CA9CDD
md5: 838f67d7a4b6824ec59892057aab3bb7
sha1: ae6904b386c06361fba243eb359a5d46cc85718f
sha256: 10b3addcd8d4ac13a05391a939b334d0a2f7586e34be79c3a89812c958cc7a5c
sha512: 699190702f20d2b014834562adf8fa16650c120780c1650b142adc5af1353302a28b52970599e76cff4569a19b88642fab03a0d1529ea5fd6124a756d21256b5
ssdeep: 24576:PBQeS4QLpuKkRYpIBrpLLR+2bOPBLpJOq2RLLNen4qD:MIokOZqJ6
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D0B56B223A98ED95D92877F15835E88902753CAD9FE18B0E307A731D5E73263CD2712E
sha3_384: cb3e2dd0d8e3f317355066a57230bcb20748698c781e0ebb16aaee89acb67948ef5cdfb622cb04c31129b328a8312397
ep_bytes: ff250020400000000000000000000000
timestamp: 2014-12-04 13:09:04

Version Info:

Translation: 0x0000 0x04b0
FileDescription: Webremote TorCT NoTheme
FileVersion: 1.0.0.0
InternalName: Webremote TorCT Client.exe
LegalCopyright: Copyright © 2014
OriginalFilename: Webremote TorCT Client.exe
ProductName: Webremote TorCT NoTheme
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

HackTool.Flooder also known as:

BkavW32.AIDetectMalware.CS
LionicHacktool.Win32.Flooder.3!c
Elasticmalicious (moderate confidence)
MicroWorld-eScanGen:Variant.Johnnie.22993
FireEyeGen:Variant.Johnnie.22993
SkyhighGenericRXLJ-ZX!838F67D7A4B6
ALYacGen:Variant.Johnnie.22993
Cylanceunsafe
SangforHacktool.Msil.Sylavriu.Vcxf
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaBackdoor:MSIL/Sylavriu.f48169ef
K7GWRiskware ( 0040eff71 )
K7AntiVirusRiskware ( 0040eff71 )
VirITTrojan.Win32.Atros.BOO
SymantecML.Attribute.HighConfidence
ESET-NOD32MSIL/HackTool.Agent.GG
CynetMalicious (score: 100)
KasperskyHEUR:HackTool.MSIL.Flooder.gen
BitDefenderGen:Variant.Johnnie.22993
NANO-AntivirusTrojan.Win32.PCUZ2346.fbgann
AvastWin32:Dropper-gen [Drp]
TencentMsil.Hacktool.Flooder.Gjgl
SophosMal/Generic-S
F-SecureTrojan.TR/Flooder.2403840
ZillyaTool.Agent.Win32.10797
TrendMicroTROJ_GEN.R002C0CAA24
EmsisoftGen:Variant.Johnnie.22993 (B)
GDataMSIL.Trojan-Downloader.Agent.BGV
JiangminHackTool.MSIL.alp
WebrootW32.HackTool.Gen
GoogleDetected
AviraTR/Flooder.2403840
Antiy-AVLHackTool/MSIL.Flooder
XcitiumMalware@#2renht1m1eur5
ArcabitTrojan.Johnnie.D59D1
ZoneAlarmHEUR:HackTool.MSIL.Flooder.gen
MicrosoftBackdoor:MSIL/Sylavriu.A
McAfeeGenericRXLJ-ZX!838F67D7A4B6
MAXmalware (ai score=100)
MalwarebytesHackTool.Flooder
PandaTrj/CI.A
TrendMicro-HouseCallTROJ_GEN.R002C0CAA24
RisingBackdoor.Sylavriu!8.21C (CLOUD)
YandexTrojan.Flooder!x4ZSDu635mg
IkarusBackdoor.MSIL.Sylavriu
MaxSecureTrojan.Malware.8327446.susgen
AVGWin32:Dropper-gen [Drp]
DeepInstinctMALICIOUS

How to remove HackTool.Flooder?

HackTool.Flooder removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment