Trojan.Win32.Zenpak.azyn (file analysis)

The Trojan.Win32.Zenpak.azyn is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Zenpak.azyn virus can do?

Executable code extraction
Creates RWX memory
Unconventionial language used in binary resources: Norwegian (Nynorsk)
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Network activity detected but not expressed in API logs
Attempts to identify installed AV products by registry key
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan.Win32.Zenpak.azyn?


File Info:
crc32: 30802AA9
md5: f038dc34b0c92f4f7bfcc8f3019e90d2
name: F038DC34B0C92F4F7BFCC8F3019E90D2.mlw
sha1: 839c22251b3c79d6df5ad1460e15bfd45de46872
sha256: 1608bb2c9358589aa747a1ffc7e1ea82763a500d09b343a06dc669b115f24bee
sha512: 55db76c0deb78ebca256ffccc1f0ab4ad44a120658cbbf51e3c1e9978edfb4a7a1911950a03f836ee864860cd6bfd5ee57ce153703961ca5295b2b3334ec9b18
ssdeep: 6144:ockmSgw/BXN2bvBTD6R4npYrML+vJ9Bh7/mW6GGKR:Pk77/BXNCpTDRpS8Km8L
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:
InternalName: triwylbikes.acs
FileVers: 26.26.361
ProductionVersion: 1.0.22.25
Copyright: Copyrighz (C) 2020, padkafug
TranslationUsa: 0x0772 0x0081

Trojan.Win32.Zenpak.azyn also known as:

MicroWorld-eScan	Trojan.GenericKD.44985994
McAfee	GenericRXAA-AA!F038DC34B0C9
Cylance	Unsafe
AegisLab	Trojan.Multi.Generic.4!c
Sangfor	Malware
BitDefender	Trojan.GenericKD.44985994
BitDefenderTheta	Gen:NN.ZexaF.34688.pmKfaONYn7lG
Cyren	W32/Trojan.TDDG-0087
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:DropperX-gen [Drp]
Kaspersky	Trojan.Win32.Zenpak.azyn
Alibaba	Backdoor:Win32/KZip.230a8577
Ad-Aware	Trojan.GenericKD.44985994
Sophos	Mal/Generic-S
McAfee-GW-Edition	BehavesLike.Win32.Trojan.dc
Emsisoft	Trojan.GenericKD.44985994 (B)
Ikarus	Trojan-Proxy.Win32.Bunitu
Webroot	W32.Trojan.Gen
MAX	malware (ai score=86)
Microsoft	Trojan:Win32/Azorult.FW!MTB
Gridinsoft	Ransom.Win32.Wacatac.oa
Arcabit	Trojan.Generic.D2AE6E8A
ZoneAlarm	Trojan.Win32.Zenpak.azyn
GData	Trojan.GenericKD.44985994
Cynet	Malicious (score: 100)
Acronis	suspicious
ALYac	Trojan.GenericKD.44985994
ESET-NOD32	a variant of Win32/Kryptik.HIFA
Rising	Malware.Undefined!8.C (TFE:5:iNx4N6F544D)
SentinelOne	Static AI – Malicious PE
Fortinet	W32/GenKryptik.ERHN!tr
AVG	Win32:DropperX-gen [Drp]
CrowdStrike	win/malicious_confidence_70% (W)
Qihoo-360	Win32/Trojan.1cf

How to remove Trojan.Win32.Zenpak.azyn?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Trojan.Win32.Zenpak.azyn (file analysis)