Categories: Trojan

Trojan.Heur.xmKfrrTJm9niD (file analysis)

The Trojan.Heur.xmKfrrTJm9niD is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Heur.xmKfrrTJm9niD virus can do?

The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Authenticode signature is invalid
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Trojan.Heur.xmKfrrTJm9niD?


File Info:
name: 69CC95942A8BFB3C0FB2.mlwpath: /opt/CAPEv2/storage/binaries/dd9c69aedb6f3dcde518ca9f72c60614645d7418b3d0540074c44f8c49d85133crc32: 7F5B0EACmd5: 69cc95942a8bfb3c0fb27d59978068a3sha1: 81401811028b7fb79b1b5301927c01fbaf2dfd6bsha256: dd9c69aedb6f3dcde518ca9f72c60614645d7418b3d0540074c44f8c49d85133sha512: 9717678a88d99c5173cf5a4b8ece72b09c0c597ff0bec7ee5eecc9988ac756d5854e9cd28983e72a67d2da30a68d33acd84c308f8fa6c724ddb70a8b41beddaassdeep: 6144:MVOfZTZiOydo+h9g1V5M4orn+GrtY36V7w5KjM9AC9LzfMwHeOQoFRROX7O86fZe:qozGdX0M4ornOmZIzfMwHHQmRROXK86ctype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1808412B1F090A096D8E724F948398C712557BC7EC4F09A0951DEBB20EEB3706A65BD1Fsha3_384: 8bdabfdbeed4c73d7d20daca7e4e7520a6e398b8890758b998ec038d6b937092769e1953f5392ebd1fc2c0e9e9a66adfep_bytes: 60be00a048008dbe0070f7ff57eb0b90timestamp: 2018-10-16 22:28:49
Version Info:
FileVersion: 8.0.182.0Comments: Java RuntimeFileDescription: Java Runtime Environment 8.0 Update 192 KatılımsızProductVersion: 3.3.14.2LegalCopyright: © 2018 NouSCompanyName: Hazırlayan ::.NouS.::Translation: 0x0809 0x04b0

Trojan.Heur.xmKfrrTJm9niD also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.4!c
MicroWorld-eScan	Gen:Trojan.Heur.xmKfrrTJm9niD
FireEye	Gen:Trojan.Heur.xmKfrrTJm9niD
Skyhigh	BehavesLike.Win32.TrojanAitInject.fc
McAfee	Artemis!69CC95942A8B
Malwarebytes	Malware.AI.1222938242
Sangfor	Trojan.Win32.Agent.Vhak
Arcabit	Trojan.Heur.xmKfrrTJm9niD
APEX	Malicious
BitDefender	Gen:Trojan.Heur.xmKfrrTJm9niD
Emsisoft	Gen:Trojan.Heur.xmKfrrTJm9niD (B)
VIPRE	Gen:Trojan.Heur.xmKfrrTJm9niD
Trapmine	malicious.moderate.ml.score
SentinelOne	Static AI – Suspicious PE
Webroot	W32.Trojan.Gen
MAX	malware (ai score=85)
Xcitium	Malware@#2c2jxdqohhkfw
GData	Gen:Trojan.Heur.xmKfrrTJm9niD
BitDefenderTheta	AI:Packer.E945B1351D
ALYac	Gen:Trojan.Heur.xmKfrrTJm9niD
Cylance	unsafe
TrendMicro-HouseCall	TROJ_GEN.R002H09JT22
MaxSecure	Trojan.Malware.73921215.susgen
Fortinet	W32/PossibleThreat
DeepInstinct	MALICIOUS