Malware

SScope.Malware-Cryptor.Aenjaris (file analysis)

Malware Removal

The SScope.Malware-Cryptor.Aenjaris is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What SScope.Malware-Cryptor.Aenjaris virus can do?

  • Reads data out of its own binary image
  • A process created a hidden window
  • Drops a binary and executes it
  • Uses Windows utilities for basic functionality
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine SScope.Malware-Cryptor.Aenjaris?


File Info:

crc32: 66BD7144
md5: 05c82c57fc4d46fc18e8b4ff67ceeee0
name: 05C82C57FC4D46FC18E8B4FF67CEEEE0.mlw
sha1: c0ddf179bb359c9f78565fb0162f09ec3a01fe7d
sha256: 5077ee3d224f6bacba3f8b56911d7f67d150e7b1ca7818c8b1cdae035aeca4ee
sha512: 587d25a00333cf4b85185160055d063893ecc75071e3d7592577c7656f3a39cfc79a7f6808c2c4cf4f13c088cf3efd5a781941231fdcadcb276c2a1d5bf33cae
ssdeep: 6144:l889HL+glv12t+pqeErS+QZyXfVZodQEog:Xtvlv12t+pqor8PVZodQk
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: TODO: (c) . All rights reserved.
InternalName: AdwTest.exe
FileVersion: 1.0.0.1
CompanyName: TODO:
ProductName: TODO:
ProductVersion: 1.0.0.1
FileDescription: TODO:
OriginalFilename: AdwTest.exe
Translation: 0x0409 0x04e4

SScope.Malware-Cryptor.Aenjaris also known as:

BkavW32.AIDetect.malware1
K7AntiVirusRiskware ( 0040eff71 )
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
DrWebTrojan.MulDrop5.42246
CynetMalicious (score: 100)
CAT-QuickHealTrojan.Mauvaise.SL1
ALYacGen:Variant.Ransom.Babuk.70
CylanceUnsafe
ZillyaTrojan.AgentGen.Win32.74
SangforVirus.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaMalware:Win32/km_24f193.None
K7GWRiskware ( 0040eff71 )
Cybereasonmalicious.7fc4d4
CyrenW32/Agent.BSH.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Agent.WTK
APEXMalicious
AvastWin32:TrojanX-gen [Trj]
ClamAVWin.Malware.Razy-9759519-0
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Variant.Ransom.Babuk.70
NANO-AntivirusTrojan.Win32.Patched.foubml
MicroWorld-eScanGen:Variant.Ransom.Babuk.70
TencentTrojan.Win32.Agent.antno
Ad-AwareGen:Variant.Ransom.Babuk.70
SophosML/PE-A + Troj/Agent-AOHK
ComodoTrojWare.Win32.Aenjaris.ABC@8hq1l4
BitDefenderThetaGen:NN.ZexaF.34236.nq0@aeHeH3ei
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_NOBADY.SM
McAfee-GW-EditionBehavesLike.Win32.Trojan.dh
FireEyeGeneric.mg.05c82c57fc4d46fc
EmsisoftGen:Variant.Ransom.Babuk.70 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Agent.cqea
WebrootW32.Trojan.Gen
AviraTR/Patched.Gen
eGambitUnsafe.AI_Score_98%
Antiy-AVLTrojan/Generic.ASBOL.C536
MicrosoftTrojan:Win32/Aenjaris.AL!bit
GDataWin32.Trojan.BadJoke.J
TACHYONTrojan/W32.Nobady.pef
AhnLab-V3Trojan/Win32.Agent.R136020
Acronissuspicious
McAfeeTrojan-FKME!05C82C57FC4D
MAXmalware (ai score=84)
VBA32SScope.Malware-Cryptor.Aenjaris
MalwarebytesJokeTool.Agent
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_NOBADY.SM
RisingTrojan.Agent!1.A728 (CLASSIC)
YandexTrojan.Nobady!Q8NqjJGnHIA
IkarusTrojan.Win32.Krypt
MaxSecureTrojan.Malware.121218.susgen
FortinetW32/Agent.WTK!tr
AVGWin32:TrojanX-gen [Trj]
Paloaltogeneric.ml

How to remove SScope.Malware-Cryptor.Aenjaris?

SScope.Malware-Cryptor.Aenjaris removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment