Troj/AutoIt-DGJ (file analysis)

The Troj/AutoIt-DGJ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Troj/AutoIt-DGJ virus can do?

• Behavioural detection: Executable code extraction – unpacking
• CAPE extracted potentially suspicious content
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• CAPE detected the shellcode patterns malware family
• Binary file triggered YARA rule
• Yara detections observed in process dumps, payloads or dropped files

How to determine Troj/AutoIt-DGJ?

File Info:
name: 9F673D73E82C57B3A918.mlw
path: /opt/CAPEv2/storage/binaries/5ed47a10ca45cff3a5f499337209e825bc06226844cea68c4d14afe57eba5930
crc32: DA1E8F46
md5: 9f673d73e82c57b3a9188042d00d111a
sha1: 43a7a57c50abd1735335ce3e8a240356e6a07392
sha256: 5ed47a10ca45cff3a5f499337209e825bc06226844cea68c4d14afe57eba5930
sha512: ed9a0b74b3b610ed695c84de2191a23b0b3f00ca6287a12665a33d93d56ac3662af816bc79df4b3dc08e6ceae0dfc861390da4e9be861e62b6cbdfcfba524ade
ssdeep: 24576:oAHnh+eWsN3skA4RV1Hom2KXMmHaUuOMpsf7uGZH5:vh+ZkldoPK8YaU/Mpsf7z
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1A035AD0273D2C036FFAB92739B6AF60156BD79254133852F13981DB9BD701B2263E663
sha3_384: cad5a39d577fe2566ea5c1fe75838b2ae21c4ad8ea486db76377c1f8e967edf6e0b4d24180daa02cf967e03664209f02
ep_bytes: e8c8d00000e97ffeffffcccccccccccc
timestamp: 2024-04-10 16:23:03

Version Info:
FileVersion: 0.8.4.9
Translation: 0x0809 0x04b0

Troj/AutoIt-DGJ also known as:

How to remove Troj/AutoIt-DGJ?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.