Categories: Trojan

Trojan.StrabRI.S24673412 information

The Trojan.StrabRI.S24673412 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.StrabRI.S24673412 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Behavioural detection: Executable code extraction – unpacking
At least one process apparently crashed during execution
Dynamic (imported) function loading detected
Yara rule detections observed from a process memory dump/dropped files/CAPE
Creates RWX memory
CAPE extracted potentially suspicious content
Unconventionial language used in binary resources: Divehi
Authenticode signature is invalid
Detects Sandboxie through the presence of a library
Detects Avast Antivirus through the presence of a library
Checks the presence of disk drives in the registry, possibly for anti-virtualization
Anomalous binary characteristics

How to determine Trojan.StrabRI.S24673412?


File Info:
name: 4391448AC876884073F3.mlwpath: /opt/CAPEv2/storage/binaries/1e50ffbed4deed84209e8d4cce60223665ce17d824c52517757d174a882e8159crc32: 891F68F5md5: 4391448ac876884073f3a4575c0c9640sha1: 0af76d8b905f4afaf9be0916a4d62bb98bea97ebsha256: 1e50ffbed4deed84209e8d4cce60223665ce17d824c52517757d174a882e8159sha512: 219cb1b19cbf6bd124e31865d8314a6ee2814f9fb86d78f204315cc957ecdd4e8c5300eb7d7af5d315c69132422c4f979e32eac64c6bb38b1b699047a1f22944ssdeep: 6144:SD3Hxuf5vXLkXOnfQm3AMK0MTxeiQ9juWRC8Hd46IpL4G4XIZfxxpqs:SD3xy5voef7AMK/T2CqC8HdZIpNCIdtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1CC746C10ABA0C039F5F312F44ABA9378A93E7EA1572450CF52D52AEE47356E1EC3135Bsha3_384: 83e94319f87810a024e630f3f4a91ae907f18a1e788fc45730007ecf9836cdb78bda4489fb0f5d4aa005299e398978c6ep_bytes: 8bff558bece896de0000e8110000005dtimestamp: 2020-07-31 03:20:27
Version Info:
Translations: 0x0412 0x00ac

Trojan.StrabRI.S24673412 also known as:

Bkav	W32.KpykspaCH.Trojan
Lionic	Trojan.Win32.Blocker.mDYp
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
CAT-QuickHeal	Trojan.StrabRI.S24673412
ALYac	Trojan.GenericKD.37861275
Cylance	Unsafe
Zillya	Trojan.Smokeloader.Win32.487
K7AntiVirus	Trojan ( 005896171 )
BitDefender	Trojan.GenericKD.37861275
K7GW	Trojan ( 005896171 )
Cybereason	malicious.ac8768
Baidu	Win32.Trojan.Kryptik.jm
Cyren	W32/Kryptik.FPF.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/Smokeloader.F
APEX	Malicious
Paloalto	generic.ml
ClamAV	Win.Dropper.Chapak-9904235-0
Kaspersky	HEUR:Trojan.Win32.Strab.gen
Alibaba	Ransom:Win32/StopCrypt.ae6263e3
MicroWorld-eScan	Trojan.GenericKD.37861275
Rising	Trojan.Kryptik!1.DA4C (CLOUD)
Emsisoft	Trojan.GenericKD.37861275 (B)
DrWeb	Trojan.DownLoader43.55558
TrendMicro	Trojan.Win32.SMOKELOADER.YXBLEZ
McAfee-GW-Edition	Packed-GDT!4391448AC876
FireEye	Generic.mg.4391448ac8768840
Sophos	ML/PE-A + Troj/Krypt-DY
Ikarus	Trojan.Win32.Raccrypt
Jiangmin	Trojan.Strab.bs
Avira	HEUR/AGEN.1145928
Antiy-AVL	Trojan/Generic.ASMalwS.34C1DEC
Microsoft	Ransom:Win32/StopCrypt.MAPK!MTB
GData	Trojan.GenericKD.37861275
AhnLab-V3	Ransomware/Win.Stop.R446912
McAfee	Packed-GDT!4391448AC876
MAX	malware (ai score=87)
VBA32	Trojan.Strab
Malwarebytes	Trojan.MalPack.GS
Panda	Trj/GdSda.A
TrendMicro-HouseCall	Trojan.Win32.SMOKELOADER.YXBLEZ
Tencent	Win32.Trojan.Strab.Pcir
Yandex	Trojan.Strab!Vi2OoJFh0DM
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/GenKryptik.FMOJ!tr
BitDefenderTheta	AI:Packer.231D1A7A20
AVG	Win32:DropperX-gen [Drp]
Avast	Win32:DropperX-gen [Drp]
CrowdStrike	win/malicious_confidence_100% (W)