Trojan

Trojan-GameThief.Win32.Magania.utze (file analysis)

Malware Removal

The Trojan-GameThief.Win32.Magania.utze is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan-GameThief.Win32.Magania.utze virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Unconventionial binary language: Chinese (Simplified)
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary likely contains encrypted or compressed data.
  • Anomalous binary characteristics

How to determine Trojan-GameThief.Win32.Magania.utze?


File Info:

crc32: 824934D8
md5: 8e4c2ec3ad0a26e58a4ad893748cd3d5
name: 8E4C2EC3AD0A26E58A4AD893748CD3D5.mlw
sha1: 2e019437452ed98690ace071e2b3eb6244f739fa
sha256: d275599e3565ca23348cbac5e8d815f56ed00c4c068d2270d2ae8d16db704223
sha512: 3816db79f880a45cbc3309c0fa4b57151107f43d64d84f9d8e98f3a0f337a4a3bb633802b686514e8f69f028da30a480c2c358bb2dd76e213e2a0d025a56a123
ssdeep: 12288:S2uNW5wwyPImzQ/+afpnRyY9jjU8dAjYnJfnmcx11WnB/:oN0wwuFQZfpcYRzdAsey11WF
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: java
InternalName: Copyright ? 2013
FileVersion: 7.0.110.21
CompanyName: Oracle Corporation
PrivateBuild:
LegalTrademarks:
Comments:
ProductName: Java(TM) Platform SE 7 U11
SpecialBuild:
ProductVersion: 7.0.110.21
FileDescription: Java(TM) Platform SE binary
OriginalFilename: java.exe
Translation: 0x0804 0x04b0

Trojan-GameThief.Win32.Magania.utze also known as:

BkavW32.AIDetect.malware1
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
CylanceUnsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
K7GWTrojan ( 004baa321 )
Cybereasonmalicious.7452ed
CyrenW32/Threat-HLLIE-based!Maximus
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Packed.Enigma.AAA
APEXMalicious
AvastWin32:Evo-gen [Susp]
ClamAVWin.Trojan.Bifrose-9837535-0
KasperskyTrojan-GameThief.Win32.Magania.utze
SophosMal/Generic-S
BitDefenderThetaGen:NN.ZexaF.34722.NC0aaWCdAWob
TrendMicroTROJ_GEN.R005C0DF121
McAfee-GW-EditionBehavesLike.Win32.Sality.jc
FireEyeGeneric.mg.8e4c2ec3ad0a26e5
SentinelOneStatic AI – Suspicious PE
eGambitUnsafe.AI_Score_100%
MicrosoftBackdoor:Win32/Zegost.CH
ZoneAlarmTrojan-GameThief.Win32.Magania.utze
GDataWin32.Trojan.Agent.3R0IML
AhnLab-V3Backdoor/Win.Zegost.C4507386
McAfeeArtemis!8E4C2EC3AD0A
VBA32BScope.Trojan.Downloader
MalwarebytesMalware.AI.2251104497
PandaTrj/CI.A
TrendMicro-HouseCallTROJ_GEN.R005C0DF121
RisingMalware.Heuristic!ET#99% (RDMK:cmRtazp9nQBXI+KVPTC4l3ScbzWK)
IkarusTrojan.SuspectCRC
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/PossibleThreat
AVGWin32:Evo-gen [Susp]

How to remove Trojan-GameThief.Win32.Magania.utze?

Trojan-GameThief.Win32.Magania.utze removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment