Categories: Malware

What is “Symmi.8651”?

The Symmi.8651 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Symmi.8651 virus can do?

Creates RWX memory
The binary likely contains encrypted or compressed data.
The executable is likely packed with VMProtect
Tries to suspend Cuckoo threads to prevent logging of malicious activity
Tries to unhook or modify Windows functions monitored by Cuckoo
Creates a hidden or system file
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Symmi.8651?


File Info:
crc32: 85CE90F9md5: 214abc01907a8a366e197fc9c62b97b6name: 214ABC01907A8A366E197FC9C62B97B6.mlwsha1: 0c4146ed5eb55a3e2114b7605c3fa0e625024184sha256: 6e295b8254cdf2a65f5f6391d1fe253b638ab95a810a7622f53d81362c5b8134sha512: 0cab2eda43b86bcb106d62db98f05f9cc12c1bc8e14981a1ac37714bf2ccdc39f3488695dd4a0de15eb25ba885e5af6d0b7331a77c6b8375d62e3ae8b56c952bssdeep: 196608:mlv0GB60YHnhV0yJ2Coa0hiGxMUZUT1h:mldB602hV0ij0hoUZUptype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Symmi.8651 also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Trojan ( 00526c2c1 )
Elastic	malicious (high confidence)
ALYac	Gen:Variant.Symmi.8651
Cylance	Unsafe
Sangfor	Suspicious.Win32.Save.a
BitDefender	Gen:Variant.Symmi.8651
K7GW	Trojan ( 00526c2c1 )
Cybereason	malicious.1907a8
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Packed.VMProtect.MX
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	VHO:Trojan-Dropper.Win32.Dapato.gen
MicroWorld-eScan	Gen:Variant.Symmi.8651
Ad-Aware	Gen:Variant.Symmi.8651
Sophos	ML/PE-A + Mal/VMProtBad-A
F-Secure	Trojan.TR/Crypt.XPACK.Gen
BitDefenderTheta	Gen:NN.ZexaF.34294.@JW@aiYbr4m
McAfee-GW-Edition	BehavesLike.Win32.Generic.wc
FireEye	Generic.mg.214abc01907a8a36
Emsisoft	Gen:Variant.Symmi.8651 (B)
SentinelOne	Static AI – Malicious PE
Avira	TR/Crypt.XPACK.Gen
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Arcabit	Trojan.Symmi.D21CB
GData	Gen:Variant.Symmi.8651
MAX	malware (ai score=83)
Rising	Malware.Heuristic!ET#100% (RDMK:cmRtazpzqndO0JJkXRhj4Aw2BTCF)
Yandex	Trojan.GenAsa!lkP188T9ez4
MaxSecure	Trojan.Malware.300983.susgen