Trojan

Trojan.GenericIH.S30066892 information

Malware Removal

The Trojan.GenericIH.S30066892 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Trojan.GenericIH.S30066892 virus can do?

  • Sample contains Overlay data
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • Unconventionial language used in binary resources: Arabic (Libya)
  • The binary contains an unknown PE section name indicative of packing
  • Executable file is packed/obfuscated with MPRESS
  • Authenticode signature is invalid
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Trojan.GenericIH.S30066892?



File Info:

name: 3FFC98F702C7DF103AC0.mlw
path: /opt/CAPEv2/storage/binaries/1cbd69a8d4ae2d84596701e726c595d45906a713b070919935e06249e27c17f2
crc32: F9E7D1B3
md5: 3ffc98f702c7df103ac0d37013295d4c
sha1: f259a8b86d56a273d39e4b0669eeecca16c8cfce
sha256: 1cbd69a8d4ae2d84596701e726c595d45906a713b070919935e06249e27c17f2
sha512: fa876ef49fc6fcff561880191dbef1370afa8043baa67d641be4dfe491710ed90feb8a18b3e3680712741bed10fc6d32c0b8c6201607b541027593762528838f
ssdeep: 384:alF5u+XVNu9/efxYp2N68wfmtow9VF4347h0oV1Nm0Z3k6O8:WPu+XVY9/eJZZw+tB9Vuo7uw1Nmo3k6/
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1AB132439DAD944B6E37BCA7AC5F651C6E826BD223B015D8E508A33400833F97EDE115E
sha3_384: 190feb1aa28d33438535c89afdab91c624ee9e561c6c7fdd9bf417d46f5da622d1a3813a85539447d005d959c2cbccea
ep_bytes: 57565351e87ef4ffffc3cccccccccccc
timestamp: 1973-03-03 10:25:35


Version Info:

CompanyName: JineJong
FileDescription: JineJong company
FileVersion: Version 2.5.23
InternalName: JineJong
LegalCopyright: Copyright by JineJong
OriginalFilename: JineJong
Translation: 0x040b 0x04e2

Trojan.GenericIH.S30066892 also known as:

BkavW32.AIDetectMalware
tehtrisGeneric.Malware
MicroWorld-eScanTrojan.Ppatre.Gen.1
ClamAVWin.Downloader.Upatre-6840800-0
CAT-QuickHealTrojan.GenericIH.S30066892
McAfeeUpatre-FAEL!3FFC98F702C7
MalwarebytesWaski.Trojan.Downloader.DDS
VIPRETrojan.Ppatre.Gen.1
SangforSuspicious.Win32.Save.ins
K7AntiVirusTrojan ( 0052964f1 )
K7GWTrojan ( 0052964f1 )
CrowdStrikewin/malicious_confidence_100% (D)
BitDefenderThetaGen:NN.ZexaF.36196.cq2@aGyzVyiG
VirITTrojan.Win32.Upatre.CG
CyrenW32/Upatre.GR.gen!Eldorado
Elasticmalicious (high confidence)
ESET-NOD32Win32/TrojanDownloader.Waski.A
APEXMalicious
CynetMalicious (score: 100)
KasperskyTrojan-Downloader.Win32.Upatre.bla
BitDefenderTrojan.Ppatre.Gen.1
NANO-AntivirusTrojan.Win32.Upatre.dfecyf
SUPERAntiSpywareTrojan.Agent/Gen-Upatre
AvastWin32:Agent-AULS [Trj]
TencentTrojan-Downloader.Win32.Upatre.ka
EmsisoftTrojan.Ppatre.Gen.1 (B)
BaiduWin32.Trojan-Downloader.Waski.a
F-SecureHeuristic.HEUR/AGEN.1315021
DrWebTrojan.DownLoad3.34292
ZillyaDownloader.Upatre.Win32.70504
TrendMicroTROJ_UPATRE.SMBG
McAfee-GW-EditionBehavesLike.Win32.Generic.pt
Trapminemalicious.high.ml.score
FireEyeGeneric.mg.3ffc98f702c7df10
SophosTroj/HkMain-AZ
SentinelOneStatic AI – Malicious PE
GDataWin32.Trojan-Downloader.Upatre.BK
JiangminTrojanDownloader.Upatre.p
AviraHEUR/AGEN.1315021
Antiy-AVLVirus/Win32.Expiro.imp
XcitiumTrojWare.Win32.TrojanDownloader.Upatre.AAL@5iclp5
ArcabitTrojan.Ppatre.Gen.1
ZoneAlarmTrojan-Downloader.Win32.Upatre.bla
MicrosoftTrojan:Win32/PWSZbot.GSB!MTB
GoogleDetected
AhnLab-V3Downloader/Win.Upatre.R493522
VBA32TrojanDownloader.Upatre
ALYacTrojan.Ppatre.Gen.1
MAXmalware (ai score=89)
Cylanceunsafe
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_UPATRE.SMBG
RisingDownloader.Waski!1.A489 (CLASSIC)
YandexTrojan.GenAsa!+rIQ7cDoUXQ
IkarusTrojan.Win32.Bublik
MaxSecureTrojan.Upatre.Gen
FortinetW32/Waski.A!tr
AVGWin32:Agent-AULS [Trj]
Cybereasonmalicious.702c7d
DeepInstinctMALICIOUS

How to remove Trojan.GenericIH.S30066892?

Trojan.GenericIH.S30066892 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment