Categories: Trojan

Trojan.Win32.Eb.bec (file analysis)

The Trojan.Win32.Eb.bec is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Eb.bec virus can do?

Executable code extraction
Creates RWX memory
A process attempted to delay the analysis task.
Unconventionial language used in binary resources: Norwegian (Nynorsk)
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Anomalous binary characteristics

How to determine Trojan.Win32.Eb.bec?


File Info:
crc32: 0119E099md5: c5eb53999c2c6dde72cf1cd0f695a2eaname: C5EB53999C2C6DDE72CF1CD0F695A2EA.mlwsha1: 0c0c7c6f6ddbed7d53aefbb8adc51595c2b23dafsha256: d7a91da5a639f0dbd755a2ddc914c4d46989bb50eca0215223485ff3c79d51cesha512: ec5ed7906c80d0b3a19efaedd3f8f0034633c98685c1b37f1687a19ffb70c1e485c7eccee1b34d850061aab94f2e4b08fa8774393879da1015fcc4736907a69dssdeep: 98304:M8pc0qmNCZWbI5JNOHg7NPbby5xcD3/SXKsg2xHUZpW6MUEXBa7AgCmrQuIF3ze:JpcWyDsHUZYUWqri3zijMHrmE6RJqtype: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
Version Info:
InternalName: triwylbikes.acsFileVers: 26.26.361ProductionVersion: 1.0.22.25Copyright: Copyrighz (C) 2020, padkafugTranslationUsa: 0x0772 0x0081

Trojan.Win32.Eb.bec also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.44990771
FireEye	Generic.mg.c5eb53999c2c6dde
McAfee	GenericRXAA-AA!C5EB53999C2C
Cylance	Unsafe
AegisLab	Trojan.Win32.Generic.4!c
Sangfor	Malware
BitDefender	Trojan.GenericKD.44990771
BitDefenderTheta	Gen:NN.ZexaF.34688.@pKfaWx33VoG
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Paloalto	generic.ml
Kaspersky	Trojan.Win32.Eb.bec
Alibaba	Trojan:Win32/Kryptik.d8c56fde
Ad-Aware	Trojan.GenericKD.44990771
Emsisoft	Trojan.GenericKD.44990771 (B)
F-Secure	Trojan.TR/AD.GoCloudnet.wbndz
TrendMicro	TrojanSpy.Win32.GLUPTEBA.USMANLD20
McAfee-GW-Edition	BehavesLike.Win32.Trojan.rc
Sophos	Mal/Generic-S
Ikarus	Win32.Outbreak
GData	Trojan.GenericKD.44990771
Webroot	W32.Trojan.Gen
Avira	TR/AD.GoCloudnet.wbndz
Kingsoft	Win32.Troj.Generic_a.a.(kcloud)
Gridinsoft	Trojan.Win32.Packed.oa!s2
ZoneAlarm	Trojan.Win32.Eb.bec
Microsoft	Trojan:Win32/Glupteba!ml
Acronis	suspicious
MAX	malware (ai score=87)
Malwarebytes	Trojan.MalPack.GS
ESET-NOD32	a variant of Win32/Kryptik.HIFA
TrendMicro-HouseCall	TrojanSpy.Win32.GLUPTEBA.USMANLD20
Rising	Malware.Undefined!8.C (TFE:5:iNx4N6F544D)
SentinelOne	Static AI – Malicious PE
Fortinet	W32/GenKryptik.ERHN!tr
AVG	Win32:DropperX-gen [Drp]
Avast	Win32:DropperX-gen [Drp]
CrowdStrike	win/malicious_confidence_80% (D)
Qihoo-360	Generic/HEUR/QVM11.1.E4F7.Malware.Gen