Categories: SpyTrojan

What is “Trojan-Spy.Win32.Stealer.ana”?

The Trojan-Spy.Win32.Stealer.ana is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan-Spy.Win32.Stealer.ana virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (1 unique times)
Creates RWX memory
Possible date expiration check, exits too soon after checking local time
The binary likely contains encrypted or compressed data.
Attempts to modify proxy settings
Collects information to fingerprint the system

How to determine Trojan-Spy.Win32.Stealer.ana?


File Info:
crc32: 573FDB4Emd5: 67ea9086ecd8c75e082e76f9f5e59bdename: 67EA9086ECD8C75E082E76F9F5E59BDE.mlwsha1: df208b3106c03f96c5867d050ef96597f4962669sha256: 63833601335f2f2db989a1f0ab15327c3055db099fb98694101094c7af42bd1esha512: 1f7ca448cef416a166a18c545efcb8f0f6e6679bf6f78e0ade2bab0a7ed63ff2767f2b8b244404f554bc8a2f104c5363790ebcaf4389a81ea0294459e3715793ssdeep: 12288:FNjpR9/a37Wlhfncw0XbsQUToVhgMCVh3Gb5YVMYSaY2e8xFZ4YSpVo8MwvAqV5k:Fz/a3ylhRgctype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: Copyright xa9.  All rights reserved.InternalName: HavingLittleFileVersion: 3.5.3.5CompanyName: C.O.M.O.D.O.LegalTrademarks: Copyright xa9.  All rights reserved.Comments: Setrendermode Msau Basket Researches BringsProductName: HavingLittleProductVersion: 3.5.3.5FileDescription: Setrendermode Msau Basket Researches BringsOriginalFilename: HavingLittle.exeTranslation: 0x0409 0x04b0

Trojan-Spy.Win32.Stealer.ana also known as:

K7AntiVirus	Riskware ( 0040eff71 )
Elastic	malicious (high confidence)
DrWeb	Trojan.PWS.Stealer.24814
Cynet	Malicious (score: 100)
CAT-QuickHeal	Trojan.Mauvaise.SL1
ALYac	Trojan.GenericKD.31277321
Cylance	Unsafe
Zillya	Trojan.Stealer.Win32.1001
Sangfor	Trojan.Win32.Stealer.ana
CrowdStrike	win/malicious_confidence_100% (D)
Alibaba	TrojanSpy:Win32/Stealer.c8909078
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.6ecd8c
Symantec	Trojan Horse
ESET-NOD32	Win32/PSW.Delf.OSF
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan-Spy.Win32.Stealer.ana
BitDefender	Trojan.GenericKD.31277321
NANO-Antivirus	Trojan.Win32.Stealer.fjfmwl
MicroWorld-eScan	Trojan.GenericKD.31277321
Tencent	Win32.Trojan-spy.Stealer.Wrqw
Ad-Aware	Trojan.GenericKD.31277321
Sophos	Mal/Generic-S
Comodo	Malware@#1mbsau9sis3ty
BitDefenderTheta	Gen:NN.ZexaF.34692.Dq0@aCh2cRii
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Ransom_HPLOCKY.SME1
McAfee-GW-Edition	BehavesLike.Win32.Injector.gh
FireEye	Generic.mg.67ea9086ecd8c75e
Emsisoft	Trojan.GenericKD.31277321 (B)
SentinelOne	Static AI – Suspicious PE
Jiangmin	TrojanSpy.Stealer.gs
Avira	TR/PSW.Agent.bthox
Antiy-AVL	Trojan/Generic.ASMalwS.287CE5E
Microsoft	Trojan:Win32/Gandcrab!rfn
Arcabit	Trojan.Generic.D1DD4109
AegisLab	Trojan.Win32.Stealer.4!c
ZoneAlarm	Trojan-Spy.Win32.Stealer.ana
GData	Trojan.GenericKD.31277321
AhnLab-V3	Malware/Win32.Ransom_hplocky.C2814233
McAfee	Artemis!67EA9086ECD8
VBA32	BScope.Backdoor.Androm
Panda	Trj/CI.A
TrendMicro-HouseCall	Ransom_HPLOCKY.SME1
Yandex	TrojanSpy.Stealer!KsAX1NHgf1k
Ikarus	Trojan-Spy.Remcos
Fortinet	W32/Kryptik.GLHS!tr.ransom
AVG	Win32:Malware-gen
Paloalto	generic.ml