Categories: Malware

Heur.Conrox.2 (file analysis)

The Heur.Conrox.2 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Heur.Conrox.2 virus can do?

Unconventionial binary language: Russian
Unconventionial language used in binary resources: Russian
The executable is compressed using UPX
Crashed cuckoomon during analysis. Report this error to the Github repo.
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Heur.Conrox.2?


File Info:
crc32: CA03174Dmd5: e9f0051fb8eb2284c472d3ce6a0b92f3name: E9F0051FB8EB2284C472D3CE6A0B92F3.mlwsha1: 31cf23cf53af1541a4c62553ea31954d61eb6856sha256: 097ae25ad445cca4090d272c13f153238e4a5056812198df3adb6156ab55eebfsha512: c6e5973cfffd9bbb378ec357d357574cb99f4cdc503814156d662927e47f57e39bb1781f1cbabf91c7191958d7f2e0ea0e0f3108a4d954bc6c93b8dfea926f8essdeep: 3072:9K0NW5ccx514z/mQW6Pti87MvPjIOmsNwVPcXb:9K04xwzUSM8MPcOm/P+type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
Version Info:
LegalCopyright: InternalName: KLite Codec PackFileVersion: 9.0.1.0CompanyName: LegalTrademarks: ProductName: KLite Codec PackProductVersion: 11.0.2.0FileDescription: KLite Codec PackOriginalFilename: KLite Codec PackTranslation: 0x0419 0x04e3

Heur.Conrox.2 also known as:

Bkav	W32.FakeWmpQKB.Fam.Trojan
K7AntiVirus	Trojan ( 004bcce41 )
Lionic	Trojan.Win32.CodecPack.lz8p
Elastic	malicious (high confidence)
DrWeb	Trojan.DownLoader2.45293
Cynet	Malicious (score: 100)
ALYac	Gen:Heur.Conrox.2
Cylance	Unsafe
Zillya	Trojan.FakeAV.Win32.337582
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (D)
Alibaba	TrojanDownloader:Win32/CodecPack.691a1861
K7GW	Trojan ( 004bcce41 )
Cybereason	malicious.fb8eb2
Cyren	W32/FakeAlert.JE.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/TrojanDownloader.FakeAlert.BBT
APEX	Malicious
Avast	Win32:Dropper-EOZ [Drp]
ClamAV	Win.Downloader.108652-1
Kaspersky	Trojan-Downloader.Win32.CodecPack.sjt
BitDefender	Gen:Heur.Conrox.2
NANO-Antivirus	Trojan.Win32.MLW.boamf
ViRobot	Trojan.Win32.A.Downloader.219136.B
MicroWorld-eScan	Gen:Heur.Conrox.2
Tencent	Malware.Win32.Gencirc.10b81d66
Ad-Aware	Gen:Heur.Conrox.2
Sophos	ML/PE-A + Mal/EncPk-NS
Comodo	Packed.Win32.MUPX.Gen@24tbus
BitDefenderTheta	Gen:NN.ZelphiF.34236.nm0@aiiIOIlc
VIPRE	Trojan.Win32.Generic.pak!cobra
TrendMicro	TROJ_FAKEAV.SM3
McAfee-GW-Edition	BehavesLike.Win32.PWSZbot.dm
FireEye	Generic.mg.e9f0051fb8eb2284
Emsisoft	Gen:Heur.Conrox.2 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	TrojanDownloader.CodecPack.bfk
Webroot	W32.Malware.Gen
Avira	TR/Agent.103936.22
Antiy-AVL	Trojan/Generic.ASCommon.B
Microsoft	PWS:Win32/Zbot!ml
GData	Gen:Heur.Conrox.2
TACHYON	Joke/W32.Renos.219136
AhnLab-V3	Trojan/Win32.FakeAV.R2261
Acronis	suspicious
McAfee	Downloader-CEW.r
MAX	malware (ai score=100)
VBA32	Trojan.Terapeft.xh
Malwarebytes	Malware.Heuristic.1003
Panda	Generic Malware
TrendMicro-HouseCall	TROJ_FAKEAV.SM3
Yandex	Trojan.GenAsa!NZtXHG81Kdo
Ikarus	Trojan-Downloader.Win32.CodecPack
MaxSecure	Trojan.CodecPack.Gen
Fortinet	W32/CodePack.ABT!tr
AVG	Win32:Dropper-EOZ [Drp]
Paloalto	generic.ml