Trojan

Trojan.Win32.Dynara.dnp (file analysis)

Malware Removal

The Trojan.Win32.Dynara.dnp is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win32.Dynara.dnp virus can do?

  • CAPE extracted potentially suspicious content
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • CAPE detected the RedLine malware family
  • Anomalous binary characteristics
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Trojan.Win32.Dynara.dnp?


File Info:

name: 34B6916BD365CE8F8B88.mlw
path: /opt/CAPEv2/storage/binaries/045e1e2e9ab2c2908d99778d672f74b7b8dcad242757d154ccd5cb808fbe9dd9
crc32: 7AC0FAB3
md5: 34b6916bd365ce8f8b88c26c3d1ff26d
sha1: 2d79f7df629acd5657d10496828be3160bacdf85
sha256: 045e1e2e9ab2c2908d99778d672f74b7b8dcad242757d154ccd5cb808fbe9dd9
sha512: ee9769a5abdd7425640257de351bbe815b2ec29d34f55ecc8d8a445088e4213f1cd3d2507336beb4f5e825574abd2ffa5323d633a7904d9c9ebb77a026e91282
ssdeep: 393216:DPZtK9N3YLT3EZgEz+X92aipZVnqdJ49db1Vv6T:DPZt43gcz+t2aeZVnhrbXv6T
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T18FE633173C9937BDE8C35DB22ED5834E42BC393C85AC4359B47BC862AD211A69A432D7
sha3_384: fd7755b9f05df51cdd666bc1d6945a3230cab95a8e2999c07088163e2538292e2bda1cff22c39b74eab05bc0efcf0c5d
ep_bytes: e8e15c0000e9a4feffff8bff558bec83
timestamp: 2012-07-13 22:47:16

Version Info:

Translation: 0x0000 0x04b0
Comments: 一款快捷回复软件,支持QQ,微信,千牛等各大PC软件快捷回复工具
CompanyName:
FileDescription: 快捷回复软件
FileVersion: 2019.1.3.0
InternalName: EYY250.COM.exe
LegalCopyright: Copyright © 2019 快捷回复软件
LegalTrademarks:
OriginalFilename: EYY250.COM.exe
ProductName: -
ProductVersion: 2019.1.3.0
Assembly Version: 2019.1.3.0

Trojan.Win32.Dynara.dnp also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Dynara.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKD.50231935
FireEyeTrojan.GenericKD.50231935
SkyhighBehavesLike.Win32.Generic.tc
McAfeeGenericRXAA-AA!34B6916BD365
Cylanceunsafe
SangforTrojan.Win32.Dynara.Vo1n
K7AntiVirusRiskware ( 00584baa1 )
AlibabaTrojan:Win32/Dynara.af5a760c
K7GWRiskware ( 00584baa1 )
Cybereasonmalicious.f629ac
ArcabitTrojan.Generic.D2FE7A7F
BitDefenderThetaGen:NN.ZexaF.36608.@t0@aGyLFFn
SymantecML.Attribute.HighConfidence
KasperskyTrojan.Win32.Dynara.dnp
BitDefenderTrojan.GenericKD.50231935
Ad-AwareTrojan.GenericKD.50231935
SophosMal/Generic-S
VIPRETrojan.GenericKD.50231935
EmsisoftTrojan.GenericKD.50231935 (B)
SentinelOneStatic AI – Suspicious PE
Antiy-AVLTrojan/Win32.Generic
ZoneAlarmTrojan.Win32.Dynara.dnp
GDataTrojan.GenericKD.50231935
ALYacTrojan.GenericKD.50231935
MAXmalware (ai score=83)
MalwarebytesGeneric.Malware/Suspicious
PandaTrj/Chgt.AD
TrendMicro-HouseCallTROJ_GEN.R002H09EL23
RisingTrojan.Generic@AI.100 (RDML:72htq8CqDG1ErnJgsLcyvw)
MaxSecureTrojan.Malware.184293388.susgen
FortinetW32/PossibleThreat
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_60% (W)

How to remove Trojan.Win32.Dynara.dnp?

Trojan.Win32.Dynara.dnp removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment