Categories: Spy

Spyware.Nexus (file analysis)

The Spyware.Nexus is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Spyware.Nexus virus can do?

Attempts to repeatedly call a single API many times in order to delay analysis time
Steals private information from local Internet browsers
Collects information about installed applications
Network activity detected but not expressed in API logs
Checks the CPU name from registry, possibly for anti-virtualization
Attempts to access Bitcoin/ALTCoin wallets
Harvests credentials from local FTP client softwares
Harvests information related to installed instant messenger clients

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Spyware.Nexus?


File Info:
crc32: 90B972BFmd5: 696bfbd43c13ca196d0d70e5855e66e4name: nexus.exesha1: 050da294044a547592efb5dee475196d2c71d869sha256: b4a4fc9b41bee1f4d9b16eb88bc400041118ca631edde4cf17ccf6ca8a8a763csha512: c36b4c5cc4de42a8ca16c1fb2594270db881ce9332a7cd1bd9a695b74008602c0ddef03882c1134aed273d5040b885613956851a58e8c880ba23c18258902058ssdeep: 49152:UOiRiNK7F0OiiDRqy7UkJzNFUgKpNxh1QbQzFzx:vwFMw7UkZNFhktype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Spyware.Nexus also known as:

Bkav	W32.AIDetectVM.malware2
MicroWorld-eScan	Gen:Variant.Fugrafa.32752
McAfee	GenericRXAA-AA!696BFBD43C13
ALYac	Gen:Variant.Fugrafa.32752
CrowdStrike	win/malicious_confidence_70% (D)
BitDefender	Gen:Variant.Fugrafa.32752
K7GW	Spyware ( 0055f8e41 )
K7AntiVirus	Spyware ( 0055f8e41 )
ESET-NOD32	a variant of Win32/Spy.Agent.PWS
APEX	Malicious
Avast	Win32:PWSX-gen [Trj]
GData	Gen:Variant.Fugrafa.32752
Kaspersky	HEUR:Trojan-PSW.Win32.Fareit.vho
NANO-Antivirus	Trojan.Win32.Fareit.hihqwo
Rising	Stealer.Krypton!1.B834 (RDMK:cmRtazrJl+IA5KHpOpTQvEKHkUlM)
Endgame	malicious (high confidence)
Emsisoft	Gen:Variant.Fugrafa.32752 (B)
F-Secure	Heuristic.HEUR/AGEN.1130749
DrWeb	Trojan.PWS.Siggen2.45945
Trapmine	suspicious.low.ml.score
FireEye	Gen:Variant.Graftor.714584
Ikarus	Trojan-Spy.Agent
Jiangmin	Trojan.PSW.Fareit.acpp
Avira	HEUR/AGEN.1130749
MAX	malware (ai score=82)
Antiy-AVL	Trojan/Win32.ParasiteStealer.a
Arcabit	Trojan.Fugrafa.D7FF0
ZoneAlarm	HEUR:Trojan-PSW.Win32.Fareit.vho
Microsoft	Trojan:Win32/Wacatac.D!ml
Acronis	suspicious
VBA32	BScope.TrojanSpy.Stealer
Ad-Aware	Gen:Variant.Fugrafa.32752
Malwarebytes	Spyware.Nexus
Panda	Trj/GdSda.A
Tencent	Malware.Win32.Gencirc.10b9c363
Fortinet	W32/Agent.PWS!tr.pws
AVG	Win32:PWSX-gen [Trj]