Categories: Trojan

TrojanDownloader:Win32/Adload!pz information

The TrojanDownloader:Win32/Adload!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanDownloader:Win32/Adload!pz virus can do?

Sample contains Overlay data
Performs HTTP requests potentially not found in PCAP.
Reads data out of its own binary image
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Authenticode signature is invalid
Attempts to modify proxy settings

How to determine TrojanDownloader:Win32/Adload!pz?


File Info:
name: 5174D5ADEA7AF40E3F4F.mlwpath: /opt/CAPEv2/storage/binaries/9d2d2f7af2856ca0e4dc2e0f4f2703ee11d4149d95b2aa7b6004d297b1025416crc32: 373CC190md5: 5174d5adea7af40e3f4f4377b80183b3sha1: dd99b0b1f2b2aae9a0f32b5e69afc700aab2970csha256: 9d2d2f7af2856ca0e4dc2e0f4f2703ee11d4149d95b2aa7b6004d297b1025416sha512: 1d97073893e3ae38c2e7d38d758ebbe463aba99d0752a90056e0596c443a6b42c2e780211d662ffe76a8a8164cafb851d115afda55bbce2dcf7552ca8ef705abssdeep: 6144:zm8IQfnnxHSuHT4FZGHrCUR9bPxKSUE9r/kg8omRX:zm8zfnIJFdURVrMg+RXtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1145412DA2B3F0A94CA678A3C3109BB1262354E99DC3AF5DB5354356D1F77908EE00D2Bsha3_384: a8a49513f02d29dcbc722408d4e2650139e2f5b8b7d15d5ef01e9e709f5f0365fb9797d4ad2e83a6f272e850caf597d2ep_bytes: 60be003049008dbe00e0f6ffc787087atimestamp: 2011-03-14 09:12:40
Version Info:
CompanyName: FileDescription: 283648FileVersion: 1.0.0.0InternalName: LegalCopyright: LegalTrademarks: OriginalFilename: ProductName: ProductVersion: 1.0.0.0Comments: Translation: 0x0804 0x03a8

TrojanDownloader:Win32/Adload!pz also known as:

Lionic	Trojan.Win32.Generic.limx
Elastic	malicious (moderate confidence)
DrWeb	Trojan.DownLoader4.5793
MicroWorld-eScan	Gen:Variant.Genie.455
FireEye	Generic.mg.5174d5adea7af40e
Skyhigh	BehavesLike.Win32.ObfuscatedPoly.dc
McAfee	GenericRXAA-AA!5174D5ADEA7A
Cylance	unsafe
Zillya	Downloader.Agent.Win32.85948
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( f1000a011 )
Alibaba	TrojanDownloader:Win32/Dloadr.aab02a16
K7GW	Trojan ( f1000a011 )
Cybereason	malicious.1f2b2a
BitDefenderTheta	Gen:NN.ZelphiF.36744.rmLfaKrcBggj
VirIT	Trojan.Win32.Generic.IDL
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of Win32/TrojanDownloader.Delf.QEW
APEX	Malicious
ClamAV	Win.Trojan.Agent-361453
Kaspersky	HEUR:Trojan-Downloader.Win32.Agent.gen
BitDefender	Gen:Variant.Genie.455
NANO-Antivirus	Trojan.Win32.Agent.chpfx
Avast	Win32:Evo-gen [Trj]
Tencent	Malware.Win32.Gencirc.10b0b1a2
Emsisoft	Gen:Variant.Genie.455 (B)
Google	Detected
F-Secure	Trojan.TR/ATRAPS.Gen
Baidu	Win32.Trojan-Downloader.Delf.bz
VIPRE	Gen:Variant.Genie.455
TrendMicro	TROJ_DLOAD.SMUJ
Trapmine	malicious.high.ml.score
Sophos	Mal/DelpDwnld-B
SentinelOne	Static AI – Suspicious PE
GData	Gen:Variant.Genie.455
Jiangmin	TrojanDownloader.Agent.cwot
Webroot	W32.Malware.gen
Varist	W32/AdLoad.L.gen!Eldorado
Avira	TR/ATRAPS.Gen
Antiy-AVL	Trojan[Downloader]/Win32.Agent
Kingsoft	Win32.Trojan-Downloader.Agent.gen
Xcitium	TrojWare.Win32.TrojanDownloader.Delf.fmmu@3820h3
Arcabit	Trojan.Genie.455
ViRobot	Trojan.Win32.A.Downloader.284919[UPX]
ZoneAlarm	HEUR:Trojan-Downloader.Win32.Agent.gen
Microsoft	TrojanDownloader:Win32/Adload!pz
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Agent.R46654
ALYac	Gen:Variant.Genie.455
MAX	malware (ai score=100)
VBA32	TrojanDownloader.Agent
Malwarebytes	Delphi.Trojan.Downloader.DDS
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	TROJ_DLOAD.SMUJ
Rising	Downloader.Delf!8.16F (TFE:5:ZPzJNfEc8ML)
Yandex	Trojan.GenAsa!TiD8GbqP+uk
Ikarus	Trojan-Downloader.Win32.Delf
MaxSecure	Trojan.Malware.1355911.susgen
Fortinet	W32/Delf.QEW!tr.dldr
AVG	Win32:Evo-gen [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_90% (D)