Categories: Malware

About “Mal/EncPk-AOT” infection

The Mal/EncPk-AOT is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Mal/EncPk-AOT virus can do?

Unconventionial language used in binary resources: Hebrew
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Anomalous binary characteristics
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Mal/EncPk-AOT?


File Info:
name: 537F680D6501C3D9DAB8.mlwpath: /opt/CAPEv2/storage/binaries/089ddac04a53c022294268cd8d1bd06793bf023ac6f3db478c54f4cf73d9045ecrc32: 87F5EA6Amd5: 537f680d6501c3d9dab8e95f93f2e8easha1: 92992b576676432ac7fdb65ec1b17fa0e3ae3a3fsha256: 089ddac04a53c022294268cd8d1bd06793bf023ac6f3db478c54f4cf73d9045esha512: 719c873778a68c024f93210a1b0a65cd3188d36c07edb9c873219c3998724aa91164ac79398e85836d3ec4f923b9e84d9333ac9dad32e9384ab7d8d641feb53essdeep: 196608:CdQaHc2cJgKaza5Sy/sRbS69Kews9KMul3375KjyrrI1/wKjyrsKP/m:qQx2ta5SbD9KZs9Yl3rha/SF/type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T10FC62335E7A1D03AC1731CB1CEF680ABE56C7C32372DD8CB16C56B491A616C4A93276Bsha3_384: 296892970e045be1bd2202625896441f70b28ba6afedcf9d4aa89b3a651ece001c6b1450a15a4d46a06dac6df69884cfep_bytes: 3682b70fb221acc5ea9c7f4903b609b4timestamp: 2010-08-23 19:52:34
Version Info:
FileDescription: fcportables.blogspot.comFileVersion: 2011InternalName: LoaderLegalCopyright: Copyright (C) 2010OriginalFilename: Loader.exeProductName: Loader ApplicationProductVersion: 1, 40, 198, 0Translation: 0x0409 0x04b0

Mal/EncPk-AOT also known as:

DrWeb	Trojan.Inject2.50376
APEX	Malicious
Cynet	Malicious (score: 99)
F-Secure	Heuristic.HEUR/AGEN.1319275
McAfee-GW-Edition	BehavesLike.Win32.Dropper.wc
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.537f680d6501c3d9
Sophos	Mal/EncPk-AOT
SentinelOne	Static AI – Suspicious PE
Avira	HEUR/AGEN.1319275
Antiy-AVL	Trojan/Win32.Inject
Google	Detected
McAfee	Artemis!537F680D6501
TACHYON	Trojan/W32.Inject.12345344
Rising	Trojan.Generic@AI.84 (RDML:+nFlGVsN5J60PAF8VvHiuw)
Cybereason	malicious.766764