Trojan-PSW.Win32.Disco.sko (file analysis)

The Trojan-PSW.Win32.Disco.sko is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan-PSW.Win32.Disco.sko virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Trojan-PSW.Win32.Disco.sko?


File Info:
name: 0A07180BF36229506E48.mlw
path: /opt/CAPEv2/storage/binaries/0280989316e8ce850c57db02ee9eec8fbe36515e5e52e3b3b86176c6389564e0
crc32: 5F71A6A6
md5: 0a07180bf36229506e481d742b6208d7
sha1: 142882c16b178ad2ed50fea12ee2db1cce850fe0
sha256: 0280989316e8ce850c57db02ee9eec8fbe36515e5e52e3b3b86176c6389564e0
sha512: 4dcc331be40366cf20d54b0a438a9e878a4833183c665d3285fc8bf94adf8e318f19ca07fedb668e96822555af0c36c0e48bbec04f3ee3277ff299603c767a0f
ssdeep: 6144:SQ9lmu9QFT/lv3YSG0LZrwGQ+fkeYL2qN:SQ9lmuqTR3YSndffMR
type: PE32+ executable (console) x86-64, for MS Windows
tlsh: T143542999A39408E4F967817D8D53DA02E7B2B8120714DBDF03B4C6A62F13AE56F7DB10
sha3_384: e2b5c35ade78c3b3313811f2496c900380455102f097848977d5dc9dc55699fc2867ddbd86d1f24cbe8f8f103994b3b2
ep_bytes: 4883ec28e85b0200004883c428e972fe
timestamp: 2022-10-26 17:29:29

Version Info:
0: [No Data]

Trojan-PSW.Win32.Disco.sko also known as:

Lionic	Trojan.Win32.Disco.i!c
MicroWorld-eScan	Trojan.GenericKD.63241232
FireEye	Trojan.GenericKD.63241232
ALYac	Trojan.GenericKD.63241232
Cylance	Unsafe
Sangfor	Infostealer.Win32.Disco.Vlvm
Alibaba	TrojanPSW:Win32/Disco.f1368026
CrowdStrike	win/malicious_confidence_100% (W)
Cyren	W64/ABRisk.CMLB-7924
Symantec	Trojan.Gen.MBT
TrendMicro-HouseCall	TROJ_GEN.R002C0PK222
Kaspersky	Trojan-PSW.Win32.Disco.sko
BitDefender	Trojan.GenericKD.63241232
Avast	Win64:PWSX-gen [Trj]
Tencent	Win32.Trojan-QQPass.QQRob.Mzfl
Ad-Aware	Trojan.GenericKD.63241232
Emsisoft	Trojan.GenericKD.63241232 (B)
VIPRE	Trojan.GenericKD.63241232
TrendMicro	TROJ_GEN.R002C0PK222
McAfee-GW-Edition	RDN/Generic PWS.y
Sophos	Mal/Generic-S
GData	Trojan.GenericKD.63241232
Jiangmin	Trojan.PSW.Disco.ftn
Google	Detected
Avira	TR/Redcap.xesdb
MAX	malware (ai score=86)
Antiy-AVL	Trojan[PSW]/Win32.Disco
Kingsoft	Win32.Troj.Generic_a.a.(kcloud)
Arcabit	Trojan.Generic.D3C4FC10
ViRobot	Trojan.Win32.Z.Disco.291328
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.PWS.C5307300
McAfee	Artemis!0A07180BF362
Rising	Stealer.Disco!8.1326E (CLOUD)
Ikarus	Trojan-Spy.Win32.Cordimik
MaxSecure	Trojan.Malware.1728101.susgen
Fortinet	PossibleThreat.PALLASNET.M
AVG	Win64:PWSX-gen [Trj]
Panda	Trj/Chgt.AD

How to remove Trojan-PSW.Win32.Disco.sko?

Trojan-PSW.Win32.Disco.sko removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X