Categories: Malware

What is “Johnnie.376452”?

The Johnnie.376452 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Johnnie.376452 virus can do?

Attempts to connect to a dead IP:Port (1 unique times)
Drops a binary and executes it
Performs some HTTP requests
Uses Windows utilities for basic functionality
Attempts to modify desktop wallpaper
A process was set to shut the system down when terminated
Installs itself for autorun at Windows startup
Creates a hidden or system file

Related domains:

edgedl.me.gvt1.com

How to determine Johnnie.376452?


File Info:
crc32: 5B4133A2md5: 79f008c421d77e511a50997107e7a241name: 79F008C421D77E511A50997107E7A241.mlwsha1: 12afcaa2b6ca7a44d1e807508186c587b9e94f1bsha256: fefcd514ea47a97478ab69b62761e875748928ea70729a392e524191d9b781c4sha512: 3a217638135de4936e10820cdfdcc6799879eae0fd1e30eadeac10ff5a52c2cebcdd153bb3476f0c1a02ece1b734c3f2f958f9731620ed77e1b7c517d027370fssdeep: 3072:fGAPZIDtQ0zRagtudaDrC0WwyzfrCGPVHzzgd2HPVVf9AebuLFfK9s7IDNgDd96:fGCAS27udaYrrak9gorD6miDtype: PE32 executable (console) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Johnnie.376452 also known as:

Elastic	malicious (high confidence)
DrWeb	Trojan.KillMBR.24848
Cynet	Malicious (score: 100)
CAT-QuickHeal	Trojan.DiskWriter
ALYac	Gen:Variant.Johnnie.376452
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_60% (D)
ESET-NOD32	a variant of Win32/KillMBR.NDS
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Malware.Killmbr-7989846-0
Kaspersky	Trojan.Win32.DiskWriter.dqf
BitDefender	Gen:Variant.Johnnie.376452
MicroWorld-eScan	Gen:Variant.Johnnie.376452
Ad-Aware	Gen:Variant.Johnnie.376452
Sophos	Generic ML PUA (PUA)
BitDefenderTheta	Gen:NN.ZexaF.34058.nuW@aqrIk7oi
McAfee-GW-Edition	GenericRXPN-UH!79F008C421D7
FireEye	Generic.mg.79f008c421d77e51
Emsisoft	Gen:Variant.Johnnie.376452 (B)
SentinelOne	Static AI – Suspicious PE
eGambit	Unsafe.AI_Score_100%
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Gen:Variant.Johnnie.376452
McAfee	GenericRXPN-UH!79F008C421D7
MAX	malware (ai score=80)
VBA32	BScope.Trojan.MSIL.SchoolGirl
Malwarebytes	Malware.AI.1345464204
Ikarus	Trojan.Win32.KillMBR
AVG	Win32:Malware-gen
Qihoo-360	Win32/Ransom.DiskWriter.HgIASaAA