About “Trojan.Win32.Bingoml.cucc” infection

The Trojan.Win32.Bingoml.cucc is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Bingoml.cucc virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• Executed a command line with /C or /R argument to terminate command shell on completion which can be used to hide execution
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Possible date expiration check, exits too soon after checking local time
• Dynamic (imported) function loading detected
• Reads data out of its own binary image
• A HTTP/S link was seen in a script or command line
• Executed a very long command line or script command which may be indicative of chained commands or obfuscation
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• The executable is compressed using UPX
• Authenticode signature is invalid
• Uses Windows utilities for basic functionality
• Attempts to modify proxy settings
• Uses suspicious command line tools or Windows utilities

How to determine Trojan.Win32.Bingoml.cucc?

File Info:
name: 0C7CBA1508C2DB5BA75E.mlw
path: /opt/CAPEv2/storage/binaries/5caa506804cef8cf5a79e1aa90ea01f4619a66dda8b6cda81655fc166cf49094
crc32: FCFE6F7B
md5: 0c7cba1508c2db5ba75ec21f60d6aa1e
sha1: 5a655a149ecec8c1594922bb0bcf757109030fbd
sha256: 5caa506804cef8cf5a79e1aa90ea01f4619a66dda8b6cda81655fc166cf49094
sha512: 51756a0f867a3b99a429c0004f32fbb4c55a25840e8ce1caed632af9160268b1d10c6385a3742de75f0fa2bdcd0338f2624e14dbf269d338bab1100e347b4dfa
ssdeep: 3072:PGjKXZETYS0O1xslEuvNaKMVn5vgfAQXAQnMAd:PLGB0O3yDNbM0xXAQnd
type: PE32+ executable (console) x86-64, for MS Windows
tlsh: T11EC312A9E1A12E72CAB3153DEC25B904D00F9D0AD3EF42D58A01B6C367F994A90CD47F
sha3_384: 8c784b13d67ea80d912e9adbb1c724f7222bf5d970024a5c2823688539a592d18dc77eed7c706b25224ebf085b88cc2c
ep_bytes: 53565755488d35b52dfeff488dbe0050
timestamp: 2021-12-01 19:53:40

Version Info:
0: [No Data]

Trojan.Win32.Bingoml.cucc also known as:

How to remove Trojan.Win32.Bingoml.cucc?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.