Categories: Crack

Should I remove “HackTool:Win32/Wacatac.B!ml”?

The HackTool:Win32/Wacatac.B!ml is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What HackTool:Win32/Wacatac.B!ml virus can do?

Yara rule detections observed from a process memory dump/dropped files/CAPE
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine HackTool:Win32/Wacatac.B!ml?


File Info:
name: BAF1E83BE819AD0EFC08.mlwpath: /opt/CAPEv2/storage/binaries/c4e06ef4d0525c78d64d7def6850c660e356a842ecdcee3a38154a3b1129caaacrc32: A5F51E22md5: baf1e83be819ad0efc085b1b768f4485sha1: 03f3ad6305abe13ffe389939423eff8d90ddb97asha256: c4e06ef4d0525c78d64d7def6850c660e356a842ecdcee3a38154a3b1129caaasha512: 0cbc5a34b1639518d75b6fa84127ecb9c9db8a1959f2060dc8488424002f68625ea1c651b286c498df7a21513bb891dfb896c496533633b889cf23c3f5523dd8ssdeep: 3072:DLaCt/ZGXVAKBM26+SWFj70R+B8V31aZ5ODyV9rBM9km06Z/psaUeg03JdkjstAr:PaCUV3BM26+J0RFTkzKpR7goejzrtype: PE32+ executable (GUI) x86-64, for MS Windowstlsh: T1A2147B4773F821FCE576C630DDA14616FB76B8655B208F6F02508A2A0F62662FD39F12sha3_384: e6294454831a7385c3bb42c923bfebbb2512c44a3de1ca6cdc99d0e6abbe1cd1c849720741fa4509783a72bfcbc02d80ep_bytes: 4c8bdc49895b18574881ec80000000bbtimestamp: 2021-03-11 14:54:45
Version Info:
CompanyName: Hazardous EnvironmentsFileDescription: UACMe main moduleFileVersion: 3.2.7.2009InternalName: AkagiLegalCopyright: Copyright ©  2014 - 2020 Hazardous EnvironmentsOriginalFilename: Akagi.exeProductName: UACMeProductVersion: 3.2.7.2009Translation: 0x0409 0x04b0

HackTool:Win32/Wacatac.B!ml also known as:

Lionic	Trojan.Win32.UAC.3!c
MicroWorld-eScan	Gen:Variant.Fugrafa.13599
CAT-QuickHeal	Exploit.UacRI.S27009364
ALYac	Gen:Variant.Fugrafa.13599
Cylance	Unsafe
VIPRE	Gen:Variant.Fugrafa.13599
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 005403f11 )
Alibaba	RiskWare:Win32/PassUAC.10f5939c
K7GW	Trojan ( 005403f11 )
Cybereason	malicious.be819a
Cyren	W64/UACme.B.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win64/HackTool.UACMe.G
TrendMicro-HouseCall	TROJ_GEN.R002C0GGC22
ClamAV	Win.Tool.Fugrafa-9824642-0
Kaspersky	Exploit.Win32.UAC.ifa
BitDefender	Gen:Variant.Fugrafa.13599
NANO-Antivirus	Exploit.Win64.UAC.jqtnrf
Cynet	Malicious (score: 99)
APEX	Malicious
Tencent	Malware.Win32.Gencirc.10bb656b
Ad-Aware	Gen:Variant.Fugrafa.13599
Emsisoft	Gen:Variant.Fugrafa.13599 (B)
Zillya	Tool.UACMe.Win64.201
TrendMicro	TROJ_GEN.R002C0GGC22
McAfee-GW-Edition	Trojan-FUQU!BAF1E83BE819
FireEye	Generic.mg.baf1e83be819ad0e
Sophos	Mal/Generic-S + UACMe (PUA)
Ikarus	Trojan.Win64.Hacktool
GData	Gen:Variant.Fugrafa.13599
Jiangmin	Exploit.UAC.sq
Avira	HEUR/AGEN.1240748
MAX	malware (ai score=86)
Antiy-AVL	Trojan/Generic.ASMalwS.6734
Kingsoft	Win32.Troj.Generic_a.a.(kcloud)
Arcabit	Trojan.Fugrafa.D351F
ZoneAlarm	Exploit.Win32.UAC.ifa
Microsoft	HackTool:Win32/Wacatac.B!ml
Google	Detected
AhnLab-V3	HackTool/Win.UACMe.R433091
McAfee	Trojan-FUQU!BAF1E83BE819
VBA32	Exploit.UAC
Malwarebytes	Malware.AI.3517509817
Avast	Win64:ExploitX-gen [Expl]
Rising	Exploit.UACBypass!1.CE04 (CLASSIC)
Yandex	Exploit.UAC!O4xWwLpBUQc
MaxSecure	Trojan.Malware.141614346.susgen
Fortinet	W64/UACMe.G!tr
AVG	Win64:ExploitX-gen [Expl]
Panda	Trj/CI.A
CrowdStrike	win/malicious_confidence_100% (W)