Categories: Malware

Troj/Upatre-ER information

The Troj/Upatre-ER is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Troj/Upatre-ER virus can do?

Sample contains Overlay data
Unconventionial language used in binary resources: Arabic (Saudi Arabia)
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Troj/Upatre-ER?


File Info:
name: E53E7FB0F5042A621052.mlwpath: /opt/CAPEv2/storage/binaries/a3ba87714adfe01b1f448743f1b017775103004115a5f01491e74d362a6b7c5fcrc32: 5BFFBC61md5: e53e7fb0f5042a621052143e78b2eccasha1: b79d41cc9984570d84c30b7393875952a0d4ea28sha256: a3ba87714adfe01b1f448743f1b017775103004115a5f01491e74d362a6b7c5fsha512: 8707d0e50398d4c0d7f5483208e88a122ba274477a551565ef1a77365d3c276b0e71893fb86b73785b898317ee5780851027c186309d2966ff9ed6a83704092bssdeep: 6144:3gITGwgHF2BltbdyPUVn1/PRN2kIHVtSH:FyPyZVnnqoHtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T17374E0658BC15EF0E35BA9FA04F6E999B135FC2050C64A8E8F063BDD4DB2380946CDD9sha3_384: 61bf2afe6c996acb82af1e36cc65fdbdff88bacb2553fa85171cc9799f1abc70428ccc31c81d2589e7ea2a4a2b5aea7bep_bytes: 57565351e84bfeffffc3cccccccccccctimestamp: 2014-08-28 22:51:35
Version Info:
CompanyName: BuikFileDescription: Buik progedFileVersion: Version 2.1.1InternalName: BuikLegalCopyright: Copyright by Nego© OriginalFilename: BuikTranslation: 0x0409 0x04e3

Troj/Upatre-ER also known as:

Bkav	W32.FamVT.FpdfNHmA.Trojan
Lionic	Hacktool.Win32.ArchSMS.m1fO
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKDZ.25879
ClamAV	Win.Worm.Allaple-5
FireEye	Trojan.GenericKDZ.25879
CAT-QuickHeal	TrojanDwnldr.Upatre.AA4
McAfee	Downloader-FSH
Cylance	unsafe
Zillya	Trojan.ArchSMS.Win32.25782
Sangfor	Suspicious.Win32.Save.ins
K7AntiVirus	Trojan-Downloader ( 0048f6391 )
Alibaba	Malware:Win32/km_2460df1.None
K7GW	Trojan-Downloader ( 0048f6391 )
CrowdStrike	win/malicious_confidence_100% (W)
Baidu	Win32.Trojan-Downloader.Waski.a
VirIT	Trojan.Win32.Generic.LB
Cyren	W32/Trojan.LHNV-0625
Symantec	SMG.Heur!gen
tehtris	Generic.Malware
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	Net-Worm.Win32.Allaple.e
BitDefender	Trojan.GenericKDZ.25879
NANO-Antivirus	Virus.Win32.Allaple.bkbmt
SUPERAntiSpyware	Trojan.Agent/Gen-Upatre
Avast	Win32:Allaple-ADX
Tencent	Trojan-DL.Win32.Upatre.kx
Sophos	Troj/Upatre-ER
F-Secure	Trojan-Downloader:W32/Upatre.D
DrWeb	Trojan.Dyre.5
VIPRE	Trojan.GenericKDZ.25879
TrendMicro	TROJ_UPATRE.SMNF
McAfee-GW-Edition	BehavesLike.Win32.Downloader.fh
Emsisoft	Trojan.GenericKDZ.25879 (B)
Ikarus	Trojan-Downloader.Win32.Upatre
GData	Win32.Trojan.PSE.1B041S6
Jiangmin	Hoax.ArchSMS.aiob
Antiy-AVL	Trojan[Downloader]/Win32.Upatre
Xcitium	TrojWare.Win32.TrojanDownloader.Upatre.AAL@5iclp5
Arcabit	Trojan.Generic.D6517
ZoneAlarm	UDS:Net-Worm.Win32.Allaple.e
Microsoft	TrojanDownloader:Win32/Upatre
Google	Detected
AhnLab-V3	Trojan/Win32.Agent.R118784
Acronis	suspicious
ALYac	Trojan.GenericKDZ.25879
MAX	malware (ai score=84)
Malwarebytes	Waski.Trojan.Downloader.DDS
Panda	Trj/Agent.JIQ
TrendMicro-HouseCall	TROJ_UPATRE.SMNF
Rising	Downloader.Waski!1.A489 (CLASSIC)
Yandex	Riskware.Hoax!RCrzG6l49BI
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Upatre.Gen
Fortinet	W32/GenericKDZ.2587!tr
BitDefenderTheta	AI:FileInfector.9E9A3AD516
AVG	Win32:Allaple-ADX
DeepInstinct	MALICIOUS