Categories: Trojan

Trojan.Win32.Autoit.acgrw malicious file

The Trojan.Win32.Autoit.acgrw is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Autoit.acgrw virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Yara rule detections observed from a process memory dump/dropped files/CAPE
Dynamic (imported) function loading detected
Enumerates running processes
Drops a binary and executes it
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Uses Windows utilities for basic functionality
Created a process from a suspicious location
Steals private information from local Internet browsers

How to determine Trojan.Win32.Autoit.acgrw?


File Info:
name: 9EFC322088B957AA66D2.mlwpath: /opt/CAPEv2/storage/binaries/a308bba02b46d1566caa68d5d6df57ce942602d081ca9f1a35e030f8a8dd72afcrc32: 6D524811md5: 9efc322088b957aa66d25dfdfa189d59sha1: 9db0e1f073cd8f3ecd7880f91bc5cf55de362358sha256: a308bba02b46d1566caa68d5d6df57ce942602d081ca9f1a35e030f8a8dd72afsha512: b3d9c20ade1c754c43583be88fd9a873d411a63f211b9764458c0af5b6d24d131af05efa0d2adceadaf57898e073b08e47b674d7b4a49108ea2ba43ce65055b5ssdeep: 24576:V4lavt0LkLL9IMixoEgea1pSDykMDV13v7653wuBJQ9V3I/q9MmCS:skwkn9IMHea1OqDvf76Z5JQ9caPCStype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1E075E00273EDC3A0C3729233BE66B765AE7B7C2506A1F59B2FD5093DA920121521F673sha3_384: 4e460264713641d8b66c9e1b8d1a0e0cb19aa642242fd790969d290fa6971a6b23f0d3f0bca7bec10ab7e3e3a3363f96ep_bytes: e897cf0000e97ffeffffcccccccccccctimestamp: 2022-01-19 19:39:54
Version Info:
Translation: 0x0809 0x04b0

Trojan.Win32.Autoit.acgrw also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.38872841
FireEye	Generic.mg.9efc322088b957aa
McAfee	Artemis!9EFC322088B9
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_100% (W)
K7GW	Trojan ( 700000111 )
K7AntiVirus	Trojan ( 700000111 )
Cyren	W32/AutoIt.SM.gen!Eldorado
tehtris	Generic.Malware
ESET-NOD32	multiple detections
APEX	Malicious
Paloalto	generic.ml
ClamAV	Win.Malware.Autoit-9780500-0
Kaspersky	Trojan.Win32.Autoit.acgrw
BitDefender	Trojan.GenericKD.38872841
Avast	Win32:Malware-gen
Tencent	Win32.Trojan.Autoit.Hzno
Ad-Aware	Trojan.GenericKD.38872841
Emsisoft	Trojan.GenericKD.38872841 (B)
Comodo	ApplicUnwnt@#2q1bxrxul4qbf
TrendMicro	TROJ_GEN.F0CBC0UBB22
McAfee-GW-Edition	BehavesLike.Win32.TrojanAitInject.tc
Sophos	Mal/Generic-S
GData	Trojan.GenericKD.38872841
Webroot	W32.Trojan.Gen
Avira	DR/AutoIt.Gen8
Gridinsoft	Ransom.Win32.Sabsik.sa
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win32.Generic.C4192480
VBA32	Trojan.Autoit
ALYac	Trojan.GenericKD.38872841
MAX	malware (ai score=88)
Malwarebytes	Malware.AI.3616357514
TrendMicro-HouseCall	TROJ_GEN.F0CBC0UBB22
eGambit	Generic.Malware
Fortinet	AutoIt/Agent.OZU!tr
AVG	Win32:Malware-gen
Cybereason	malicious.088b95
Panda	Trj/CI.A
MaxSecure	Trojan.Malware.300983.susgen