Categories: Trojan

Trojan.GenericRI.S26298271 information

The Trojan.GenericRI.S26298271 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.GenericRI.S26298271 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Behavioural detection: Executable code extraction – unpacking
Yara rule detections observed from a process memory dump/dropped files/CAPE
Creates RWX memory
Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Unconventionial language used in binary resources: Spanish (Argentina)
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Trojan.GenericRI.S26298271?


File Info:
name: 66B824E062268AF87583.mlwpath: /opt/CAPEv2/storage/binaries/335b37410eee8f1b11e51ba1fbd516836977f86c2f86e11aa5900e2a765cdf7ecrc32: 9F4BA77Fmd5: 66b824e062268af87583624ad48b2a8bsha1: 88b2ce7b20ab062369f098ecfac6d1a0c407f85fsha256: 335b37410eee8f1b11e51ba1fbd516836977f86c2f86e11aa5900e2a765cdf7esha512: a2e3524fd354abab7bd711c229b8ea0bb5e566b2ac4899b225e0a070877becaff600730a544b180b1fadcaf580d824e0bbfa57cc4acbd57cecfdcc209250b3a7ssdeep: 12288:HWNjiEyFGm95rMTcSJfudfzPoXc8HE7CTVPCcD2WLg826fJA0unn:HWNe1FN5AJfuVoMM5bDBLE6Wntype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T141E40235FA9CC431C79711319820C9E46E3AB9719E77954B775C172A2E60E8C8BF231Esha3_384: 708329b188ebaa6178bc8e2fdb1733c14d841f6f65191085a5df069199a1839ad22a4f7028f07bafe69444c0b977525dep_bytes: e8ba580000e978feffffcccccccccccctimestamp: 2020-10-18 13:09:36
Version Info:
InternationalName: bomgvioci.iwaCopyright: Copyrighz (C) 2021, fudkortProjectVersion: 3.10.70.17Translation: 0x0129 0x0794

Trojan.GenericRI.S26298271 also known as:

Lionic	Trojan.Win32.Injuke.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKDZ.82235
FireEye	Generic.mg.66b824e062268af8
CAT-QuickHeal	Trojan.GenericRI.S26298271
McAfee	Artemis!66B824E06226
Malwarebytes	Trojan.MalPack.GS
Zillya	Trojan.Raccoon.Win32.202
K7AntiVirus	Trojan ( 003e58dd1 )
Alibaba	TrojanSpy:Win32/Azorult.0d9de3af
K7GW	Trojan ( 0058d1041 )
Cybereason	malicious.b20ab0
BitDefenderTheta	Gen:NN.ZexaF.34212.OqW@a4G0GIU
Cyren	W32/Qbot.FK.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/Spy.Raccoon.A
APEX	Malicious
Cynet	Malicious (score: 100)
BitDefender	Trojan.GenericKDZ.82235
SUPERAntiSpyware	Trojan.Agent/Gen-Kryptik
Tencent	Trojan-ransom.Win32.Stop.16000284
Ad-Aware	Trojan.GenericKDZ.82235
Emsisoft	Trojan.Crypt (A)
Comodo	Malware@#2plzznrf992s9
DrWeb	Trojan.PWS.Siggen3.10256
TrendMicro	TROJ_GEN.R011C0DAM22
McAfee-GW-Edition	BehavesLike.Win32.Emotet.jc
Sophos	Mal/Generic-S + Mal/Agent-AWV
GData	Win32.Trojan.BSE.16VOW5Z
Jiangmin	Trojan.Stop.cta
eGambit	Generic.Malware
Avira	TR/Redcap.oflcc
Antiy-AVL	Trojan/Win32.Injuke
Gridinsoft	Ransom.Win32.AzorUlt.sa
Arcabit	Trojan.Generic.D1413B
ZoneAlarm	HEUR:Trojan.Win32.Injuke.gen
Microsoft	Trojan:Win32/Azorult.RW!MTB
AhnLab-V3	Trojan/Win.MalPE.R464473
Acronis	suspicious
VBA32	BScope.TrojanSpy.Stealer
ALYac	Trojan.GenericKDZ.82235
MAX	malware (ai score=87)
TrendMicro-HouseCall	TROJ_GEN.R011C0DAM22
Rising	Trojan.Kryptik!1.DB29 (CLOUD)
Yandex	TrojanSpy.Raccoon!RC8S4beO8Vc
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/GenericKDZ.6DF1!tr
Panda	Trj/GdSda.A
CrowdStrike	win/malicious_confidence_100% (W)