Categories: Trojan

Trojan.Crypt.BH (file analysis)

The Trojan.Crypt.BH is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Crypt.BH virus can do?

Executable code extraction
Creates RWX memory
Possible date expiration check, exits too soon after checking local time
Reads data out of its own binary image
The binary likely contains encrypted or compressed data.
Anomalous binary characteristics

How to determine Trojan.Crypt.BH?


File Info:
crc32: 695C3F70md5: 1176ebc7d20864f6b14b7bb67b31f827name: 1176EBC7D20864F6B14B7BB67B31F827.mlwsha1: 7e9964e42913cb2b6621e0194519a7935360184esha256: a57ddb255fc5421360def944750ddf89170f3099639a6575f66c34a456c18addsha512: 7d7b6eb2e142b3f4317e5fd1a987d47fbfb67f08f08552431e6b6ef075cc9d04e83a9be03899e641ab67e37e7a162c37f330cc00857f567724ca90bf012d97b8ssdeep: 6144:zzqlKLR/xhP3eUdej7KxBDblw65isjgwhGYGy+GS/Avv:3qlKV/xhPuIXxBHlt9j4YGFYvvtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Trojan.Crypt.BH also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.Crypt.BH
FireEye	Generic.mg.1176ebc7d20864f6
CAT-QuickHeal	Backdoor.Bifrose.7730
McAfee	BackDoor-CEP.gen
Cylance	Unsafe
Zillya	Backdoor.Bifrose.Win32.41900
CrowdStrike	win/malicious_confidence_80% (D)
BitDefender	Trojan.Crypt.BH
K7GW	Trojan ( 000158851 )
K7AntiVirus	Trojan ( 000158851 )
BitDefenderTheta	AI:Packer.69810CED1F
Cyren	W32/Backdoor.HNRS-5187
Symantec	Trojan Horse
ESET-NOD32	Win32/Bifrose.ADR
Baidu	Win32.Trojan.Agent.dm
APEX	Malicious
Paloalto	generic.ml
ClamAV	Win.Trojan.Agent-36385
Kaspersky	Backdoor.Win32.Bifrose.bgn
Alibaba	Backdoor:Win32/Bifrose.9414154f
NANO-Antivirus	Trojan.Win32.Agent.cojafi
ViRobot	Backdoor.Win32.Bifrose.10240
AegisLab	Trojan.Win32.Agent.liux
Tencent	Trojan.Win32.Agent.bcn
Ad-Aware	Trojan.Crypt.BH
TACHYON	Backdoor/W32.Bifrose.272563
Emsisoft	Trojan.Crypt.BH (B)
Comodo	Backdoor.Win32.Bifrose.ADR@3xn7
F-Secure	Backdoor:W32/Bifrose.gen!A
DrWeb	BackDoor.Bifrost.779
VIPRE	Trojan.Win32.Bifrose (v)
TrendMicro	BKDR_BIFROSE.MIC
McAfee-GW-Edition	BehavesLike.Win32.VirRansom.dc
Sophos	ML/PE-A + Mal/Bifrose-R
Ikarus	Trojan.Win32.Midgare
Jiangmin	Backdoor/Bifrose.ks
MaxSecure	Poly.Trojan.Agent.BCN
Avira	BDS/Bifrose.zwz
Antiy-AVL	Trojan[Backdoor]/Win32.Bifrose
Kingsoft	Win32.Hack.Bifrose.b.(kcloud)
Microsoft	Backdoor:Win32/Bifrose
Gridinsoft	Trojan.Win32.Gen.bot!i
Arcabit	Trojan.Crypt.BH
SUPERAntiSpyware	Trojan.Agent/Gen-Bifrose
AhnLab-V3	Trojan/Win32.Bifrose.R1454
ZoneAlarm	Backdoor.Win32.Bifrose.bgn
GData	Trojan.Crypt.BH
Cynet	Malicious (score: 100)
TotalDefense	Win32/Bifrost!generic
Acronis	suspicious
VBA32	Backdoor.Bifrose
ALYac	Trojan.Crypt.BH
MAX	malware (ai score=82)
Malwarebytes	Backdoor.Bifrose
Panda	Bck/Bifrose.BHL
Zoner	Trojan.Win32.22108
TrendMicro-HouseCall	BKDR_BIFROSE.MIC
Rising	Backdoor.Bifrose!1.A05C (CLASSIC)
Yandex	Trojan.GenAsa!HgSSZWe0hGI
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_99%
Fortinet	W32/Bifrose.BBT!tr
AVG	Win32:Lazarus [Trj]
Cybereason	malicious.7d2086
Avast	Win32:Lazarus [Trj]
Qihoo-360	Win32/Backdoor.78a