Trojan

What is “TrojanDownloader.Krakod”?

Malware Removal

The TrojanDownloader.Krakod is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What TrojanDownloader.Krakod virus can do?

  • Repeatedly searches for a not-found process, may want to run with startbrowser=1 option
  • Reads data out of its own binary image
  • Uses Windows utilities for basic functionality
  • Installs itself for autorun at Windows startup
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine TrojanDownloader.Krakod?


File Info:

crc32: D2933AA4
md5: 766340736596dcf8d4775a2d8b788ac6
name: 766340736596DCF8D4775A2D8B788AC6.mlw
sha1: 183b84790d7da8979d13999696cc7eca8873506a
sha256: 23a5a79d0d51abf2ba6b2eaf2d297654f34d3fc294f99951c32efd5ecee79edd
sha512: 0a33e1eb26069fb47a443a924904725e3ee6571f99c127c16f82b58bfbb9cc8eb11cd86a0240cf2e43ba2f0535ab0bc8bb5f7d74dd5fd5034cdf7c61f0a46689
ssdeep: 48:i3Aa9uvY6uVg0dJ88RZR4gwrLOP5MYGqJXESlo/WfpMd1Ru1FsWTNQRRhBK0l0hL:Sdr88RtwYMYGqblYqpMBgsSi/cwTg
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

TrojanDownloader.Krakod also known as:

BkavW32.AIDetect.malware2
K7AntiVirusTrojan ( 0053f0d21 )
LionicTrojan.Win32.Razy.4!c
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
CAT-QuickHealTrojan.Miner.S1231016
ALYacGen:Variant.Razy.953046
CylanceUnsafe
ZillyaTrojan.Agent.Win32.806529
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaTrojan:Win32/CoinMiner.4ab9bfba
K7GWTrojan ( 005115481 )
Cybereasonmalicious.36596d
CyrenW32/S-d4e8ee80!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32Win32/CoinMiner.AIV
APEXMalicious
AvastWin32:MicMiner-A [Trj]
KasperskyHEUR:Trojan.Win32.MicroMiner.gen
BitDefenderGen:Variant.Razy.953046
NANO-AntivirusTrojan.Win32.CoinMiner.fjbgfi
MicroWorld-eScanGen:Variant.Razy.953046
TencentMalware.Win32.Gencirc.10b3bce4
Ad-AwareGen:Variant.Razy.953046
SophosMal/Generic-R + Troj/Miner-HB
ComodoTrojWare.Win32.CoinMiner.AIV@7wf9j3
BitDefenderThetaGen:NN.ZexaF.34294.amX@a0F8pah
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Generic.zt
FireEyeGeneric.mg.766340736596dcf8
EmsisoftGen:Variant.Razy.953046 (B)
SentinelOneStatic AI – Suspicious PE
JiangminPacked.Katusha.cynu
AviraTR/ATRAPS.Gen
Antiy-AVLTrojan/Generic.ASBOL.C561
MicrosoftTrojan:Win32/CoinMiner!rfn
ArcabitTrojan.Razy.DE8AD6
GDataGen:Variant.Razy.953046
Acronissuspicious
McAfeeTrojan-FNHT!766340736596
MAXmalware (ai score=100)
VBA32TrojanDownloader.Krakod
MalwarebytesMalware.AI.922631294
PandaTrj/Genetic.gen
RisingTrojan.Generic@ML.94 (RDML:jP+0+1KhY3gtvt3AkYaqRA)
YandexTrojan.GenAsa!zIlCPxYZ1W8
IkarusTrojan.Win32.CoinMiner
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Generic.AC.3F4F04!tr
AVGWin32:MicMiner-A [Trj]
Paloaltogeneric.ml

How to remove TrojanDownloader.Krakod?

TrojanDownloader.Krakod removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment