Categories: Trojan

Trojan.MauvaiseRI.S5247825 information

The Trojan.MauvaiseRI.S5247825 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.MauvaiseRI.S5247825 virus can do?

Executable code extraction
Drops a binary and executes it
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Attempts to repeatedly call a single API many times in order to delay analysis time
Installs itself for autorun at Windows startup
Creates a hidden or system file

Related domains:

ero.bckl.ir

oip.xioerabn.site

How to determine Trojan.MauvaiseRI.S5247825?


File Info:
crc32: 3FFBBC5Amd5: 75ac26e4de4065814fb938a36c127b45name: download.exesha1: e3cd071fe6ead27fe1f324eae410522da84d1cc4sha256: e4f54f1f9f9842fd4f8be4c62b5e22b94bf86937f8e11a12efea8f42de604c7fsha512: 858518734cd825a098e9ef4892321f836dc308c866c3d4a938d13b533a93ec9dcead9103934ef2149f5d24e36906341492b4935d44f145a24e58382dfb9d59e5ssdeep: 3072:kbQcl7h34OQKMhgVD+vjiyFgmuvHb5kxI8jp3:kbQmrQKMhKD+vjiCgJ2Gtype: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
Version Info:
LegalCopyright: x4f5cx8005x7248x6743x6240x6709 x8bf7x5c0ax91cdx5e76x4f7fx7528x6b63x7248FileVersion: 1.0.0.0Comments: x672cx7a0bx5e8fx4f7fx7528x6613x8bedx8a00x7f16x5199(http://www.eyuyan.com)ProductName: x6613x8bedx8a00x7a0bx5e8fProductVersion: 1.0.0.0FileDescription: x6613x8bedx8a00x7a0bx5e8fTranslation: 0x0804 0x04b0

Trojan.MauvaiseRI.S5247825 also known as:

DrWeb	Trojan.DownLoader25.10311
MicroWorld-eScan	Gen:Heur.Mint.Zard.30
FireEye	Generic.mg.75ac26e4de406581
CAT-QuickHeal	Trojan.MauvaiseRI.S5247825
McAfee	RDN/Generic.dx
Cylance	Unsafe
Sangfor	Malware
K7AntiVirus	Trojan ( 004b78a51 )
BitDefender	Gen:Heur.Mint.Zard.30
K7GW	Trojan ( 004b78a51 )
Cybereason	malicious.4de406
TrendMicro	Backdoor.Win32.ZEGOST.SMS
BitDefenderTheta	Gen:NN.ZexaF.34090.hmKfaGOPyKpb
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Dropper.Gh0stRAT-6989861-0
GData	Win32.Application.PUPStudio.A
Kaspersky	Trojan.Win32.Miancha.iua
Alibaba	Trojan:Win32/Miancha.66064b11
AegisLab	Trojan.Win32.Miancha.4!c
Rising	Trojan.Farfli!8.FF (CLOUD)
Ad-Aware	Gen:Heur.Mint.Zard.30
Emsisoft	Gen:Heur.Mint.Zard.30 (B)
Comodo	Packed.Win32.MUPX.Gen@24tbus
F-Secure	Heuristic.HEUR/AGEN.1025426
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.PUPXAX.cc
Trapmine	malicious.high.ml.score
Sophos	Troj/Kryptik-JA
Ikarus	Virus.Win32.CeeInject
Cyren	W32/Trojan.QQKA-6372
Jiangmin	Trojan.Miancha.hj
MaxSecure	Trojan.Malware.74663168.susgen
Avira	HEUR/AGEN.1025426
Antiy-AVL	Trojan/Win32.Miancha
Endgame	malicious (moderate confidence)
Arcabit	Trojan.Mint.Zard.30
SUPERAntiSpyware	Trojan.Agent/Gen-OnlineGames
ZoneAlarm	Trojan.Win32.Miancha.iua
Microsoft	VirTool:Win32/CeeInject.SN!bit
VBA32	Trojan.Reconyc
ALYac	Gen:Heur.Mint.Zard.30
MAX	malware (ai score=88)
Panda	Trj/GdSda.A
ESET-NOD32	Win32/Farfli.BLH
TrendMicro-HouseCall	Backdoor.Win32.ZEGOST.SMS
Tencent	Win32.Trojan.Miancha.Aiim
SentinelOne	DFI – Suspicious PE
eGambit	Unsafe.AI_Score_99%
Fortinet	Riskware/Generic
AVG	Win32:Malware-gen
CrowdStrike	win/malicious_confidence_80% (W)
Qihoo-360	Generic/Trojan.b08