Trojan

What is “Small.Trojan.Dropper.DDS”?

Malware Removal

The Small.Trojan.Dropper.DDS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Small.Trojan.Dropper.DDS virus can do?

  • Sample contains Overlay data
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Small.Trojan.Dropper.DDS?


File Info:

name: 14FA5A7CF354F7CA7944.mlw
path: /opt/CAPEv2/storage/binaries/e2183f4750dbb52c416f5ff3fca3759cabbd9fa2372b21a985df1200c7a575df
crc32: E2649B4F
md5: 14fa5a7cf354f7ca794452c7d655c915
sha1: da82ea540f2157e96fca2aa5b09bd1fafa71596d
sha256: e2183f4750dbb52c416f5ff3fca3759cabbd9fa2372b21a985df1200c7a575df
sha512: 96e507253436cf1aa7feb826c7a72659980a9c73d7c2b02d0b48b25747192a7b0c712f4da4a025ef4c0f7b2380d87665247482f1e3d9e7d85d2f31e9da26eaae
ssdeep: 768:QiyuzsAha9cu0Pmm+rNLn6whgMiMy0OQiAeh1WdndwwpTayO:QW89dY+GwqMvNO9Aeh1WjVZFO
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T13F336C48613989DAE3787E744CD255983AF8BF7A245F2B3F6341204BB864B83A1C157F
sha3_384: 2542ea22b6942dbb59a65d5cd68f120869aad7e35a8633ffd1a08ad1ff11989db34612fba170ae1c20e9a69582814d8e
ep_bytes: 558bec83ec588975fc4a43394df80f8e
timestamp: 1996-05-17 21:16:43

Version Info:

0: [No Data]

Small.Trojan.Dropper.DDS also known as:

LionicTrojan.Win32.Generic.4!c
MicroWorld-eScanGen:Heur.IPZ.6
FireEyeGeneric.mg.14fa5a7cf354f7ca
ALYacGen:Heur.IPZ.6
MalwarebytesSmall.Trojan.Dropper.DDS
VIPREGen:Heur.IPZ.6
SangforTrojan.Win32.Packed.V4h9
K7AntiVirusTrojan ( 0017edc21 )
AlibabaPacked:Win32/Katusha.734e3f5b
K7GWTrojan ( 0017edc21 )
CrowdStrikewin/malicious_confidence_100% (W)
CyrenW32/FakeAlert.HQ.gen!Eldorado
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Kryptik.FOK
APEXMalicious
Paloaltogeneric.ml
CynetMalicious (score: 100)
KasperskyPacked.Win32.Katusha.o
BitDefenderGen:Heur.IPZ.6
AvastWin32:Evo-gen [Trj]
TencentWin32.Packed.Katusha.Osmw
EmsisoftGen:Heur.IPZ.6 (B)
TrendMicroTROJ_FAKEAV.SMAU
McAfee-GW-EditionArtemis!Trojan
SophosML/PE-A
IkarusPacked.Win32.Katusha
GDataGen:Heur.IPZ.6
JiangminBackdoor/Small.dtb
AviraTR/Dropper.Gen
ArcabitTrojan.IPZ.6
MicrosoftTrojan:Win32/Wacatac.B!ml
GoogleDetected
AhnLab-V3Trojan/Win32.FakeAV.C101526
McAfeeArtemis!14FA5A7CF354
MAXmalware (ai score=83)
Cylanceunsafe
TrendMicro-HouseCallTROJ_FAKEAV.SMAU
RisingTrojan.Qhost!8.1B0 (TFE:5:GM2LoJxOBuU)
YandexTrojan.GenAsa!qmBdX6Xl3ws
SentinelOneStatic AI – Suspicious PE
MaxSecureTrojan.Malware.300983.susgen
BitDefenderThetaAI:Packer.2799BD821E
AVGWin32:Evo-gen [Trj]
Cybereasonmalicious.cf354f
PandaTrj/CI.A

How to remove Small.Trojan.Dropper.DDS?

Small.Trojan.Dropper.DDS removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment