Categories: Malware

What is “Program:Win32/Ymacco.AA9E”?

The Program:Win32/Ymacco.AA9E is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Program:Win32/Ymacco.AA9E virus can do?

Executable code extraction
Presents an Authenticode digital signature
Creates RWX memory
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Program:Win32/Ymacco.AA9E?


File Info:
crc32: 819D0B68md5: b0f3a46adf98efb3a9ac7cead9b4fc5aname: B0F3A46ADF98EFB3A9AC7CEAD9B4FC5A.mlwsha1: 01b0ece80907f2d9e500ada1cd2d555b782dd3a2sha256: 9e0cfd00991a3d387a78770a7748418b4d0ab978717f84a399d766b19a971df0sha512: 22076388da1305e1a9b7ad3257fde95b81118983c95b0025b3a4c848b6703257dbaeaad3da10dab7e66c18fdb7bc015dbf08f20ad0f37543f40e5b448779b6bessdeep: 3072:6YcS7/elK+/8OclqVHCWPR02j7UFMuhSNVqTZFnT0urv:z7C8uHCWPRp71uEOrnourvtype: PE32 executable (DLL) (console) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Program:Win32/Ymacco.AA9E also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Bulz.240541
FireEye	Generic.mg.b0f3a46adf98efb3
McAfee	RDN/Ursnif_Rm3
Cylance	Unsafe
AegisLab	Trojan.Win32.Deapax.4!c
K7AntiVirus	Trojan ( 00573e2a1 )
BitDefender	Gen:Variant.Bulz.240541
K7GW	Trojan ( 00573e2a1 )
Cyren	W32/Trojan.WXCN-3917
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Kaspersky	Trojan.Win32.Deapax.ag
Alibaba	Trojan:Win32/Deapax.bf5593e0
ViRobot	Trojan.Win32.Z.Deapax.135192
Ad-Aware	Gen:Variant.Bulz.240541
Emsisoft	MalCert.A (A)
Comodo	.UnclassifiedMalware@0
F-Secure	Trojan.TR/Crypt.Agent.bkxis
DrWeb	Trojan.Gozi.759
McAfee-GW-Edition	Artemis!Trojan
Sophos	Generic PUA AB (PUA)
Ikarus	Trojan-Spy.Win32.Ursnif
eGambit	Unsafe.AI_Score_95%
Avira	TR/Crypt.Agent.bkxis
Kingsoft	Win32.Troj.Deapax.ag.(kcloud)
Microsoft	Program:Win32/Ymacco.AA9E
Arcabit	Trojan.Bulz.D3AB9D
ZoneAlarm	Trojan.Win32.Deapax.ag
GData	Win32.Trojan-Spy.Ursnif.G4H8ST
Cynet	Malicious (score: 100)
ALYac	Trojan.Banker.Gozi
MAX	malware (ai score=88)
Malwarebytes	Trojan.Ursnif
Panda	Trj/CI.A
ESET-NOD32	a variant of Win32/Kryptik.HHUM
TrendMicro-HouseCall	TROJ_GEN.R002H0DKS20
Fortinet	W32/Deapax.AG!tr
AVG	FileRepMalware
Paloalto	generic.ml
Qihoo-360	Generic/HEUR/QVM40.1.84C4.Malware.Gen