Trojan.Agent.BRXQ malicious file

The Trojan.Agent.BRXQ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Agent.BRXQ virus can do?

Unconventionial language used in binary resources: Chinese (Simplified)
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Trojan.Agent.BRXQ?


File Info:
name: B836EF8335293CF35A3E.mlw
path: /opt/CAPEv2/storage/binaries/ebda34cbd05f992173e3741e2e4a37d588c9525f4f4fd5bc75cbefbf61bdd3d4
crc32: BAA589F0
md5: b836ef8335293cf35a3ee6fe81000f0a
sha1: 4301e7f4bd7080fb75134b5499d7118c4e9b88a2
sha256: ebda34cbd05f992173e3741e2e4a37d588c9525f4f4fd5bc75cbefbf61bdd3d4
sha512: c4258a5acda0ffbf02263b3c6abfa987b2001ccc947778da4e7b9ffc53ac69e68cb199fd060a88abd3e25b236f6ef48d3523a753217dc562de1e58e0641aecfb
ssdeep: 768:L2suTep11GU1a02yeWO/9GUiYcd1jMYbcTUQ7n6NfABhvuN:LDa0cFijclnaf1N
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T13813749797D2E0E9FC9C40B57253DDB548B164F72A8205624B16AD2C30303BDBB8ADDD
sha3_384: 563ea15364db308cc7e1a4cf08565207adcdb542e2af4b671922544657888fbede8ecce3265c0d59ee404fc7021531b9
ep_bytes: 558bec6aff685087400068c277400064
timestamp: 1971-06-30 10:15:47

Version Info:
0: [No Data]

Trojan.Agent.BRXQ also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.Agent.BRXQ
FireEye	Generic.mg.b836ef8335293cf3
CAT-QuickHeal	Ransom.Crowti.A6
McAfee	GenericR-GWP!B836EF833529
Cylance	Unsafe
Zillya	Trojan.Inject.Win32.193096
K7AntiVirus	Trojan ( 004e0aaf1 )
K7GW	Trojan ( 004e0aaf1 )
CrowdStrike	win/malicious_confidence_100% (D)
Symantec	Trojan.Gen.MBT
ClamAV	Win.Malware.AppWizard-9468381-1
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Trojan.Agent.BRXQ
NANO-Antivirus	Trojan.Win32.Mlw.irqrab
Avast	Win32:Evo-gen [Susp]
Tencent	Malware.Win32.Gencirc.10b3e62d
Ad-Aware	Trojan.Agent.BRXQ
Comodo	TrojWare.Win32.Injector.DBR@6b3wqb
DrWeb	Trojan.DownLoader19.62131
VIPRE	Trojan.Agent.BRXQ
McAfee-GW-Edition	GenericR-GWP!B836EF833529
Sophos	ML/PE-A + Troj/HkMain-CT
Ikarus	Trojan-Downloader.Win32.Bredolab
GData	Trojan.Agent.BRXQ
Jiangmin	Trojan.Inject.fte
Avira	HEUR/AGEN.1237969
Antiy-AVL	Trojan/Generic.ASMalwS.77
Microsoft	Trojan:Win32/Wacatac.B!ml
Google	Detected
BitDefenderTheta	Gen:NN.ZexaF.34592.cqW@au@W2Hi
ALYac	Trojan.Agent.BRXQ
MAX	malware (ai score=89)
Rising	Trojan.Generic@AI.86 (RDML:UP5756f+KU8i9OynXGY8aw)
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.300983.susgen
AVG	Win32:Evo-gen [Susp]
Cybereason	malicious.335293

How to remove Trojan.Agent.BRXQ?

Trojan.Agent.BRXQ removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X