Categories: Malware

JS.Heur.Bomber.1.A82E97B6.Gen (file analysis)

The JS.Heur.Bomber.1.A82E97B6.Gen is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What JS.Heur.Bomber.1.A82E97B6.Gen virus can do?

The office file contains 2 macros
The office file contains a macro with auto execution
The office file contains a macro with potential indicators of compromise
The office file contains a macro with suspicious strings

Related domains:

z.whorecord.xyz

How to determine JS.Heur.Bomber.1.A82E97B6.Gen?


File Info:
crc32: 8DAE83D9md5: 8e1f4ab0814d4990e6ab52339d8b79b3name: upload_filesha1: f7237b7632c1aa3e6505f5f12efe5f05827331dbsha256: 3cc7000f6f2bf315a4fc3fb0ef9035f8683d4660648e23cb178656eae79b2dc5sha512: 42a9e01dde3f5fa837b56cccea565e0225ad4a2e1c2366e56186894505c8bfe4b6dcc4d6a0fbe0aefdff15acb98fe5ad3e01e9e9abdb37f6066dd3e2d076e4d7ssdeep: 1536:Jj7uZ9R3jvhGqMOwsHOV2ZO0nIcjELcuXU:R7uTRDEqKs2sO0n9KUtype: Microsoft OOXML
Version Info:
0: [No Data]

JS.Heur.Bomber.1.A82E97B6.Gen also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	JS.Heur.Bomber.1.A82E97B6.Gen
FireEye	JS.Heur.Bomber.1.A82E97B6.Gen
CAT-QuickHeal	O97M.Downloader.39210
ALYac	Exploit.CVE-2017-11882
BitDefender	JS.Heur.Bomber.1.A82E97B6.Gen
TrendMicro	TROJ_FRS.0NA103IO20
Cyren	CVE-2017-11882.A.gen!Camelot
Symantec	Trojan.Gen.NPE
TrendMicro-HouseCall	TROJ_FRS.0NA103IO20
Kaspersky	HEUR:Trojan-Dropper.MSOffice.SDrop.gen
Alibaba	Exploit:Win32/CVE-2017-11882.11e33448
NANO-Antivirus	Trojan.Script.ExpKit.fbenub
ViRobot	XLS.Z.CVE-2017-1188.52566
AegisLab	Hacktool.MSOffice.Generic.3!c
Tencent	Office.Exploit.Generic.Ebhf
Ad-Aware	JS.Heur.Bomber.1.A82E97B6.Gen
Sophos	Troj/DocDl-AARP
Comodo	Malware@#2utmq3rsuyoko
F-Secure	Heuristic.HEUR/Macro.Downloader.MRJR.Gen
Invincea	Troj/DocDl-AARP
McAfee-GW-Edition	BehavesLike.Downloader.qc
Emsisoft	JS.Heur.Bomber.1.A82E97B6.Gen (B)
GData	Generic.Trojan.Agent.6GO4ID
Avira	EXP/CVE-2017-11882.vdmfm
MAX	malware (ai score=99)
Microsoft	Exploit:O97M/CVE-2017-11882.ARJ!MTB
Arcabit	JS.Heur.Bomber.1.A82E97B6.Gen
ZoneAlarm	HEUR:Trojan-Dropper.MSOffice.SDrop.gen
AhnLab-V3	Trojan/BIN.Maldoc
McAfee	Exploit-GBY!13F9FA6D575B
Zoner	Probably Heur.W97Obfuscated
ESET-NOD32	multiple detections
Rising	Malware.ObfusVBA@ML.94 (VBA)
Yandex	Trojan.AvsMofer.bT8FPn
Ikarus	Trojan.SuspectCRC
Fortinet	VBA/Agent.B9B2!tr
Qihoo-360	virus.vbs.qexvmc.1