Trojan

Trojan.Agent.UKED (file analysis)

Malware Removal

The Trojan.Agent.UKED is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Agent.UKED virus can do?

  • Executable code extraction
  • Creates RWX memory
  • HTTP traffic contains suspicious features which may be indicative of malware related traffic
  • Performs some HTTP requests
  • Unconventionial language used in binary resources: Japanese
  • The binary likely contains encrypted or compressed data.
  • Attempts to repeatedly call a single API many times in order to delay analysis time
  • Steals private information from local Internet browsers
  • Collects information about installed applications
  • Attempts to access Bitcoin/ALTCoin wallets
  • Harvests credentials from local FTP client softwares
  • Harvests information related to installed instant messenger clients
  • Harvests information related to installed mail clients

How to determine Trojan.Agent.UKED?


File Info:

crc32: 69A7414F
md5: f11eb3144232f06d91ec2d65d123fb58
name: pred777amx.exe
sha1: 38c1d3a0270db8b91a21abc8e86acb1f823e1f25
sha256: e1e8b9b3f3fcd3d7197ae5e8b886e253ddfdd15ce2ceb257b0190933cf791fc1
sha512: 9b25c2aa96b62bb9c22036b454e160fea44189ed019ae3ee0cb07fabdb7bb0ec6566d658e60c5bbc1a981d113059111d067e12036f6d52bfbf01647377f00d2f
ssdeep: 6144:/LGIfM3j/YdKtUB3t9QRvKOHaW+2S+UsZ0EWP4yj4RPXeuw00Sg:/bagdKtUBzXOHat2RUgNWPvFT
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan.Agent.UKED also known as:

MicroWorld-eScanTrojan.GenericKD.32900821
FireEyeGeneric.mg.f11eb3144232f06d
MalwarebytesTrojan.Agent.UKED
SangforMalware
BitDefenderTrojan.GenericKD.32900821
Cybereasonmalicious.0270db
BitDefenderThetaGen:NN.ZexaF.33558.yOW@au6PvyeG
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.GZXR
APEXMalicious
AvastWin32:CoinminerX-gen [Trj]
ClamAVWin.Malware.Generic-7485210-0
GDataTrojan.GenericKD.32900821
KasperskyTrojan-PSW.Win32.Predator.fmp
RisingTrojan.Generic@ML.89 (RDML:+PX2CI9s20cBq0vSqub9Hw)
Endgamemalicious (high confidence)
EmsisoftTrojan.Agent (A)
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.MultiPlug.fc
IkarusTrojan-Banker.Emotet
MAXmalware (ai score=82)
MicrosoftTrojan:Win32/Wacatac.B!ml
ZoneAlarmTrojan-PSW.Win32.Predator.fmp
Acronissuspicious
CylanceUnsafe
SentinelOneDFI – Malicious PE
Ad-AwareTrojan.GenericKD.32900821
AVGWin32:CoinminerX-gen [Trj]
Paloaltogeneric.ml
CrowdStrikewin/malicious_confidence_100% (D)
Qihoo-360HEUR/QVM10.1.4F11.Malware.Gen

How to remove Trojan.Agent.UKED?

Trojan.Agent.UKED removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment