Categories: Spy

About “Spyware.PasswordStealer.GO” infection

The Spyware.PasswordStealer.GO is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Spyware.PasswordStealer.GO virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Yara rule detections observed from a process memory dump/dropped files/CAPE
Dynamic (imported) function loading detected
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Authenticode signature is invalid
Collects information to fingerprint the system

How to determine Spyware.PasswordStealer.GO?


File Info:
name: 76251E256B86A39E55B6.mlwpath: /opt/CAPEv2/storage/binaries/481f455ead17a67e5b8f41fac6fe261f89b6367b60ee5844358949f52bee54a6crc32: D16AF363md5: 76251e256b86a39e55b6c2f3ae607aa7sha1: 72114fb8213ff77d927d503b2404e8f5ca3e9ed7sha256: 481f455ead17a67e5b8f41fac6fe261f89b6367b60ee5844358949f52bee54a6sha512: b3daa49dc4eb95b38710841a1e3b61a5ad3090c372d249fd1beb5eb734b03f9f3ff5d333fc0df91f6422cb6ddac0917710c75927b3779d4ef9347b0f8a77874dssdeep: 49152:qAbgdWmlk6CF0hpJ8NvSRIa/jBSV5luJ+1BhjBGEy+o46lv6aDGf5:qAUd/NnF8gWa25h1/YEf76x6aDGftype: PE32+ executable (GUI) x86-64, for MS Windowstlsh: T1B1D533EBE17BE571EA251F7D2876C26071EEC475694A3C9A0380EE47837B1B12C62D18sha3_384: dc53b2c4b7c85aa4b343dd79d1fb43406ae4e133d18fd2358c18f88d67ea3d092cdb9ec04ec6d113c57fbee8530622e5ep_bytes: 53565755488d35da54d4ff488dbedbcftimestamp: 2021-10-15 18:50:26
Version Info:
0: [No Data]

Spyware.PasswordStealer.GO also known as:

Lionic	Trojan.Win32.Disco.i!c
Cynet	Malicious (score: 100)
FireEye	Trojan.GenericKD.37832300
McAfee	Artemis!76251E256B86
Cylance	Unsafe
Sangfor	Infostealer.Win32.Disco.fnz
K7AntiVirus	Trojan ( 0057b4871 )
Alibaba	TrojanPSW:Win32/Disco.ea0dabea
K7GW	Trojan ( 0057b4871 )
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of WinGo/PSW.Agent.J
APEX	Malicious
Paloalto	generic.ml
Kaspersky	Trojan-PSW.Win32.Disco.fnz
BitDefender	Trojan.GenericKD.37832300
MicroWorld-eScan	Trojan.GenericKD.37832300
Avast	Win64:Trojan-gen
Ad-Aware	Trojan.GenericKD.37832300
Emsisoft	Trojan.GenericKD.37832300 (B)
TrendMicro	TROJ_GEN.R002C0WJN21
McAfee-GW-Edition	BehavesLike.Win64.Trickbot.vc
Sophos	Mal/Generic-S
GData	Trojan.GenericKD.37832300
Jiangmin	Trojan.PSW.Disco.bna
Avira	TR/Redcap.fgtrv
Antiy-AVL	Trojan/Generic.ASMalwS.34B9990
Gridinsoft	Ransom.Win64.Wacatac.sa
Microsoft	Trojan:Win32/Wacatac.B!ml
ALYac	Trojan.GenericKD.37832300
MAX	malware (ai score=84)
Malwarebytes	Spyware.PasswordStealer.GO
TrendMicro-HouseCall	TROJ_GEN.R002C0WJN21
Ikarus	Trojan-PSW.Agent
Fortinet	Malicious_Behavior.SB
AVG	Win64:Trojan-gen
Panda	Trj/CI.A
MaxSecure	Trojan.Malware.300983.susgen