About “Trojan.Generic.31222119” infection

The Trojan.Generic.31222119 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Generic.31222119 virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• Behavioural detection: Executable code extraction – unpacking
• Dynamic (imported) function loading detected
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Creates RWX memory
• CAPE extracted potentially suspicious content
• Unconventionial language used in binary resources: Latvian
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Detects Sandboxie through the presence of a library
• Detects Avast Antivirus through the presence of a library
• Checks the presence of disk drives in the registry, possibly for anti-virtualization

How to determine Trojan.Generic.31222119?

File Info:
name: 5CB2282A2C618C4BC88B.mlw
path: /opt/CAPEv2/storage/binaries/402b0a019bafa68836e3c9b0ce5dd5ea09e8de4b77e2d2600587092929935fd5
crc32: 7B111210
md5: 5cb2282a2c618c4bc88bf80263d4a07c
sha1: 8846ee913c1a74a4ac4bd8165590578ebe210b95
sha256: 402b0a019bafa68836e3c9b0ce5dd5ea09e8de4b77e2d2600587092929935fd5
sha512: 4f7084c72065bdcc185539bd7b06615a4cf0bafbee22c934e5e1546cc97ae2d17c14b4ff53eed97937846184a8c7bad14dd5acc1be6c299b850a8b5e0cedf8ad
ssdeep: 6144:U2ZK/jWRmaQUFOhuduzbgwu6L7ITsqSigaTwVf:NZKCRmaQphudunnn7s
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T190449DF076D8CC71D0932E3044609AA40A3BBC51D5609547F7B4A79E2EB3BCCA6E635E
sha3_384: b81c51c482ba38f6ec34a61d27b60cfa98d804185665644791a52041f03c763318a9a00a8c0ea78261b600a7cb49006a
ep_bytes: e854420000e989feffff6a086870b041
timestamp: 2020-08-14 07:38:45

Version Info:
InternalName: bomgpiaruci.iwa
Copyright: Copyrighz (C) 2021, fudkagat
ProductVersion: 15.54.12.11
Translation: 0x0014 0x046a

Trojan.Generic.31222119 also known as:

How to remove Trojan.Generic.31222119?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.