Categories: Crack

HackTool:MSIL/AutoKms!pz malicious file

The HackTool:MSIL/AutoKms!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What HackTool:MSIL/AutoKms!pz virus can do?

Sample contains Overlay data
Reads data out of its own binary image
Drops a binary and executes it
Authenticode signature is invalid
CAPE detected the shellcode get eip malware family
The sample wrote data to the system hosts file.
Anomalous binary characteristics
Yara detections observed in process dumps, payloads or dropped files

How to determine HackTool:MSIL/AutoKms!pz?


File Info:
name: C6677809CD034AFC7054.mlwpath: /opt/CAPEv2/storage/binaries/734281575bfc105b0b6d37f4607b24957548f8ae809dc151a5a347aadacc6025crc32: DA16097Cmd5: c6677809cd034afc70540c18158d62c1sha1: 01014010aec9acd44e6ec869ea10e25d145088fbsha256: 734281575bfc105b0b6d37f4607b24957548f8ae809dc151a5a347aadacc6025sha512: 85a2460cc642daf028241367c7435677dc5de8925b673a407ebb21963485ed4caab02b5d8465c4fca8f94bfac61ad62c1bc29d030d422aa53de74548bc39c8d7ssdeep: 24576:HfmMv6Ckr7Mny5QAk1AdRX1lDtNxYY27XHYtH9H5UsKeczZ:H3v+7/5QAk1y1lDOY273YtH9Z5Kecdtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1AD75F212B7D680B6D9E339B12D7BE32BEB3576180323C4DBA7E01E768E111509B36761sha3_384: 9ab0878b7dff983661999b613b1ec049192a60f58e653ca7e2e3eda279981e3810a94f70bf54b1765a063dcc7cd92d80ep_bytes: e8a7c00000e979feffffcccccccccccctimestamp: 2010-03-07 16:08:39
Version Info:
FileVersion: 3.3.6.0LegalCopyright: © 2010 www.tnctr.comTranslation: 0x0809 0x04b0

HackTool:MSIL/AutoKms!pz also known as:

Bkav	W32.Common.41214DED
Lionic	Trojan.Win32.Generic.4!c
tehtris	Generic.Malware
DrWeb	Trojan.Hosts.48717
MicroWorld-eScan	Trojan.GenericKD.71012435
FireEye	Generic.mg.c6677809cd034afc
Skyhigh	BehavesLike.Win32.PUP.tc
McAfee	Artemis!C6677809CD03
Malwarebytes	Malware.AI.1703911213
Sangfor	Trojan.Win32.Agent.Vjgv
CrowdStrike	win/grayware_confidence_60% (W)
Elastic	malicious (high confidence)
APEX	Malicious
ClamAV	Win.Malware.Generic-9819831-0
BitDefender	Trojan.GenericKD.71012435
Avast	Win32:Malware-gen
Emsisoft	Trojan.GenericKD.71012435 (B)
VIPRE	Trojan.GenericKD.71012435
Sophos	Generic ML PUA (PUA)
Ikarus	Trojan.BAT.Disabler
MAX	malware (ai score=81)
GData	Trojan.GenericKD.71012435
Jiangmin	TrojanDropper.Dorifel.ryj
Google	Detected
Kingsoft	malware.kb.a.985
Arcabit	Trojan.Generic.D43B9053
Microsoft	HackTool:MSIL/AutoKms!pz
Cynet	Malicious (score: 100)
VBA32	Trojan.Hosts
ALYac	Trojan.GenericKD.71012435
Cylance	unsafe
TrendMicro-HouseCall	TROJ_GEN.R002H09LV23
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.230155095.susgen
Fortinet	W32/PossibleThreat
AVG	Win32:Malware-gen
Cybereason	malicious.0aec9a