What is “Trojan.Wacatac.S19452450”?

The Trojan.Wacatac.S19452450 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Wacatac.S19452450 virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• Dynamic (imported) function loading detected
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Possible date expiration check, exits too soon after checking local time
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• Executable file is packed/obfuscated with MPRESS
• Authenticode signature is invalid
• Uses Windows utilities for basic functionality
• Deletes executed files from disk

How to determine Trojan.Wacatac.S19452450?

File Info:
name: E04B3E41D0E08207E185.mlw
path: /opt/CAPEv2/storage/binaries/6a540afe680207bb341b50ed3f52483d74583090a05a44dd908c7150c6ba5e10
crc32: 25D17B6C
md5: e04b3e41d0e08207e185a6ac6a4a1538
sha1: 7b15eefef286f1bc105fc1034c61fe83ed17a5ac
sha256: 6a540afe680207bb341b50ed3f52483d74583090a05a44dd908c7150c6ba5e10
sha512: bfb1d41e2af1012e369d0a08bfaed216c9a4135cee9f3ba9c678dceef2146fbf296e47694e276297ae669b030830aba73560f671fb854292ce1400c7fa7b1a23
ssdeep: 6144:Slvaiq8W9pNdKJcYC0JIpDqHeGdHWqA+V2:hgKTScYbep2HXr8
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1CE242206AA6E42D4FF4D30771AB9F44338F2F62D186DD742E30B80A52CDEB2245BD45A
sha3_384: d0aea25d71cea9e44071aafc7062eb38d969bb0f51349648fac38b8c6f60bca293d28e5f1f3e22345a1116104b8b1a05
ep_bytes: 60e80000000058055a0b00008b3003f0
timestamp: 2011-03-25 13:17:51

Version Info:
0: [No Data]

Trojan.Wacatac.S19452450 also known as:

How to remove Trojan.Wacatac.S19452450?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.