What is “Trojan.Win32.Mixer”?

The Trojan.Win32.Mixer is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Mixer virus can do?

• SetUnhandledExceptionFilter detected (possible anti-debug)
• Behavioural detection: Executable code extraction – unpacking
• Yara rule detections observed from a process memory dump/dropped files/CAPE
• Creates RWX memory
• Guard pages use detected – possible anti-debugging.
• Dynamic (imported) function loading detected
• A process created a hidden window
• CAPE extracted potentially suspicious content
• Unconventionial language used in binary resources: Chinese (Hongkong)
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• Uses Windows utilities for basic functionality
• Deletes its original binary from disk
• CAPE detected the OnlyLogger malware family
• Uses suspicious command line tools or Windows utilities

How to determine Trojan.Win32.Mixer?

File Info:
name: 816B14AA14EED19C704D.mlw
path: /opt/CAPEv2/storage/binaries/5801957b14d35e61f031eeb5da5fe730949cc14797d9126ee436cd30bbae606a
crc32: 2D77E760
md5: 816b14aa14eed19c704db9b48bd96e01
sha1: 40e0042e3548bf5e0b35e1895e4a1cff5a5dd6e7
sha256: 5801957b14d35e61f031eeb5da5fe730949cc14797d9126ee436cd30bbae606a
sha512: 0709d79330c7ee3f5b0bef57408b919654f70b265a097ee6a99ce210ffd694f45a1c40293e14beb0c869441078f3c2a7cc22d49d0e9267a20ecd47b8aacc34a0
ssdeep: 12288:vDlA7Bt+BpmTuAif5AF8+9arHwZwH7SFsEi5:o3ymaA6A39sQi
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D594B010BA90D035F1F726F449BAD3A8B52E7EA15B2454CBA3D52BEE06346E4EC31347
sha3_384: efc574f1707c4df2a7d16506e054b44f0d7e12c1bf7db5f8ea21df10c0cf7639a2bb380bd596f0a13ad581b3a7088c3a
ep_bytes: 8bff558bece886d60000e8110000005d
timestamp: 2020-12-10 10:31:31

Version Info:
0: [No Data]

Trojan.Win32.Mixer also known as:

How to remove Trojan.Win32.Mixer?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.