Categories: Risk

About “RiskWare.BitCoinStealer” infection

The RiskWare.BitCoinStealer is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What RiskWare.BitCoinStealer virus can do?

The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine RiskWare.BitCoinStealer?


File Info:
crc32: BC403E50md5: 6bbb83f473541372b194e6939d885da1name: 6BBB83F473541372B194E6939D885DA1.mlwsha1: e6972008aadc15ebb9407277aaef1f8c029e6738sha256: 237a1d0da8a43bf82e7de017b56a3e8be09ef7706bd685841cc42f9716616bc6sha512: 0c6c9337ca449b394ad06dd5e15e61412158d9909d4d7c2b7aaca8cbb3010c1f8f8c1b23cf4f8ced7584ce4bdbf2cf13ee8373c74cbb77165b13d120a8eec17dssdeep: 12288:6//PRf0bBCEsJLENp6SctDyl1qL7y1SLNhlb/ctY8yPKurzkO4bLLN0K0hL:6//PRc9FMEj6tDE87bUxyiurJgtype: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
Version Info:
Translation: 0x0000 0x04b0LegalCopyright: Copyright xa9  2018Assembly Version: 1.0.0.0InternalName: Bitcoin BruteForce v1.exeFileVersion: 1.0.0.0CompanyName: LegalTrademarks: Comments: ProductName: Bitcoin BruteForce v1.0ProductVersion: 1.0.0.0FileDescription: Bitcoin BruteForce v1.0OriginalFilename: Bitcoin BruteForce v1.exe

RiskWare.BitCoinStealer also known as:

Bkav	W32.AIDetect.malware2
Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
ALYac	Gen:Variant.Trojan.Crypt.63
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_60% (D)
Alibaba	Trojan:Win32/Disfa.c38a3503
Cybereason	malicious.473541
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	HEUR:Trojan.Win32.Disfa.gen
BitDefender	Gen:Variant.Trojan.Crypt.63
NANO-Antivirus	Trojan.Win32.Hesv.fhmpkv
MicroWorld-eScan	Gen:Variant.Trojan.Crypt.63
Ad-Aware	Gen:Variant.Trojan.Crypt.63
Comodo	Malware@#1eha2ymouvtv6
BitDefenderTheta	Gen:NN.ZexaF.34294.WmKfa8z47Xl
FireEye	Generic.mg.6bbb83f473541372
Emsisoft	Gen:Variant.Trojan.Crypt.63 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	TrojanDropper.Phpw.hw
Avira	HEUR/AGEN.1120557
eGambit	Unsafe.AI_Score_99%
Antiy-AVL	Trojan/Generic.ASMalwS.27A8511
Microsoft	Trojan:Win32/Occamy.C23
Arcabit	Trojan.Trojan.Crypt.63
GData	Gen:Variant.Trojan.Crypt.63
AhnLab-V3	Malware/Win32.Generic.C1829301
McAfee	Artemis!6BBB83F47354
Malwarebytes	RiskWare.BitCoinStealer
Panda	Trj/CI.A
Yandex	Trojan.GenAsa!tevPufJ/OwE
Ikarus	Trojan.MSIL.Crypt
AVG	Win32:Malware-gen
Paloalto	generic.ml