Trojan-Spy.Win32.Stealer.nb (file analysis)

The Trojan-Spy.Win32.Stealer.nb is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan-Spy.Win32.Stealer.nb virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
Drops a binary and executes it
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan-Spy.Win32.Stealer.nb?


File Info:
crc32: 4C5090E0
md5: 0c26d82ea47191103d178e0bba696044
name: 0C26D82EA47191103D178E0BBA696044.mlw
sha1: 94d1478c493cddf7b79757c732c9a6ec8aa8d206
sha256: 69d15206c9fd455f7122cb4a9b972dd0fbec4ccbbba2fb256ab9f6c1e5c8f10a
sha512: ecdc9bee01b2c9f36b5e40f6e6542b98787e5863d2086b361887757657028daddd9770274607145a7ac8baa23d8df62e0fe08fc3d6d642ea9227a6ed3c23a975
ssdeep: 6144:APyFaFiE48kcOB0+Iu5uTq4exosqSGejvIz4QOO3yD0wFae0BKYJ9hvzqF596xDL:4yIFix3hAm4exQH/OOC7d0BRVvG9C+ZO
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright:                                                                                                     
FileVersion:                     
CompanyName:                                                             
Comments: This installation was built with Inno Setup.
ProductName: USBAntivirus                                                
ProductVersion: v2                                                
FileDescription: USBAntivirus Setup                                          
Translation: 0x0000 0x04b0

Trojan-Spy.Win32.Stealer.nb also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Riskware ( 0040eff71 )
DrWeb	Trojan.PWS.Stealer.24300
Cynet	Malicious (score: 99)
ALYac	Trojan.Brsecmon.1
Cylance	Unsafe
Zillya	Trojan.Stealer.Win32.660
Alibaba	TrojanSpy:Win32/Stealer.45e32ae7
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.ea4719
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of Win32/Kryptik.GLAC
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan-Spy.Win32.Stealer.nb
BitDefender	Trojan.Brsecmon.1
NANO-Antivirus	Trojan.Win32.Stealer.fijpvq
MicroWorld-eScan	Trojan.Brsecmon.1
Tencent	Win32.Trojan-spy.Stealer.Fic
Sophos	Mal/Generic-S
Comodo	Malware@#19gty2pikvl2e
BitDefenderTheta	Gen:NN.ZexaF.34686.kuW@aSlSE8hO
McAfee-GW-Edition	BehavesLike.Win32.AdwareFileTour.gc
FireEye	Trojan.Brsecmon.1
Emsisoft	Trojan.Brsecmon.1 (B)
Webroot	W32.Adware.Installcore
Avira	HEUR/AGEN.1112397
Microsoft	Trojan:Win32/Gandcrab.AF
SUPERAntiSpyware	Trojan.Agent/Gen-Dropper
ZoneAlarm	Trojan-Spy.Win32.Stealer.nb
GData	Trojan.Brsecmon.1
AhnLab-V3	Malware/Win32.Generic.C2728611
McAfee	Generic.dyu
MAX	malware (ai score=100)
VBA32	TrojanSpy.Stealer
Malwarebytes	Trojan.PasswordStealer
Panda	Trj/CI.A
Rising	Ransom.GandCrypt!8.F33E (CLOUD)
Yandex	TrojanSpy.Stealer!/9WoHfdjh+0
Ikarus	Trojan.Crypt
Fortinet	W32/GenKryptik.CNAR!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove Trojan-Spy.Win32.Stealer.nb?

Trojan-Spy.Win32.Stealer.nb removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Trojan-Spy.Win32.Stealer.nb (file analysis)