Categories: Trojan

Trojan-Banker.Win32.RTM.hbj information

The Trojan-Banker.Win32.RTM.hbj is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan-Banker.Win32.RTM.hbj virus can do?

Executable code extraction
Injection (inter-process)
Injection (Process Hollowing)
Creates RWX memory
A process created a hidden window
Uses Windows utilities for basic functionality
Executed a process and injected code into it, probably while unpacking
Attempts to repeatedly call a single API many times in order to delay analysis time
Installs itself for autorun at Windows startup
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan-Banker.Win32.RTM.hbj?


File Info:
crc32: 4FA9EF53md5: bcf68d93a541a91987edc25f21013188name: BCF68D93A541A91987EDC25F21013188.mlwsha1: b096b6759d4193b28bd6f1752d993ac968f7ff12sha256: 74f858ddf69b8cdc11296a080f96f2f8f1a04832daed407076bf67e7ffb7d191sha512: d1451aff3bb34e72c8717efcc40dd43dfbb08aebfa75c82d96db0a992acb55985e26e6b96119600fb816b7bdb660ae4da68334d264bbf113a6b5763a8913c0a4ssdeep: 6144:aHulCVt4kzCe3Py4WaJnOBZIHGzgzYarwVdICoOrTIl:yulcXCeK4fM8mrc02NOr0ltype: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Trojan-Banker.Win32.RTM.hbj also known as:

Bkav	W32.AIDetectVM.malware2
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.Agent.FBFK
FireEye	Generic.mg.bcf68d93a541a919
CAT-QuickHeal	Trojan.Multi
Qihoo-360	Generic/HEUR/QVM40.1.21A0.Malware.Gen
McAfee	W32/PinkSbot-HF!BCF68D93A541
Cylance	Unsafe
Sangfor	Malware
CrowdStrike	win/malicious_confidence_80% (D)
BitDefender	Trojan.Agent.FBFK
K7GW	Spyware ( 0040f0131 )
K7AntiVirus	Spyware ( 0040f0131 )
Cyren	W32/Trojan.SXXT-8788
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:BankerX-gen [Trj]
ClamAV	Win.Malware.Fbfk-9817495-0
Kaspersky	Trojan-Banker.Win32.RTM.hbj
Alibaba	TrojanBanker:Win32/Qakbot.e0bb9e10
AegisLab	Hacktool.Win32.Krap.lKMc
Rising	Trojan.Kryptik!8.8 (TFE:2:ItOo6ejRx2)
Ad-Aware	Trojan.Agent.FBFK
Emsisoft	Trojan.Crypt (A)
F-Secure	Trojan.TR/AD.Qbot.xzkby
DrWeb	BackDoor.Qbot.568
McAfee-GW-Edition	W32/PinkSbot-HF!BCF68D93A541
Sophos	Mal/Generic-R + Mal/EncPk-APV
Ikarus	Trojan.Win32.Crypt
Jiangmin	Trojan.Banker.RTM.uc
Avira	TR/AD.Qbot.xzkby
MAX	malware (ai score=80)
Antiy-AVL	GrayWare/Win32.Kryptik.ehls
Kingsoft	Win32.Heur.KVMH008.a.(kcloud)
Microsoft	Trojan:Win32/Qakbot.GP!MTB
Gridinsoft	Trojan.Win32.Kryptik.oa!s1
Arcabit	Trojan.Agent.FBFK
ZoneAlarm	Trojan-Banker.Win32.RTM.hbj
GData	Trojan.Agent.FBFK
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Generic.C4275387
BitDefenderTheta	Gen:NN.ZedlaF.34700.AE4@auLIdwni
ALYac	Trojan.Agent.FBFK
VBA32	BScope.Backdoor.Qbot
Malwarebytes	Backdoor.Qbot
Panda	Trj/Genetic.gen
ESET-NOD32	a variant of Win32/Kryptik.HIKD
Tencent	Win32.Trojan-banker.Rtm.Pkqw
SentinelOne	Static AI – Suspicious PE
eGambit	Unsafe.AI_Score_59%
Fortinet	W32/Kryptik.HDNN!tr
AVG	Win32:BankerX-gen [Trj]
Paloalto	generic.ml