Categories: Trojan

TrojanDownloader:Win32/Banload.AHC (file analysis)

The TrojanDownloader:Win32/Banload.AHC is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanDownloader:Win32/Banload.AHC virus can do?

Behavioural detection: Executable code extraction – unpacking
Authenticode signature is invalid
Attempts to modify proxy settings

How to determine TrojanDownloader:Win32/Banload.AHC?


File Info:
name: 6701043AFF305D499EDD.mlwpath: /opt/CAPEv2/storage/binaries/3dd836e593b3990688a6a6eeaab95e64e2e665368a4fed92041a3ac44ba84376crc32: F72828BEmd5: 6701043aff305d499edd85cabf880198sha1: 4db1f8a529c9afc3849beb43b40dbc1b8c399f4asha256: 3dd836e593b3990688a6a6eeaab95e64e2e665368a4fed92041a3ac44ba84376sha512: 16ea75187dd9dcd4e9f00d6109634d87e1ee3db30699107ff39342330066df8bcc06577e3fa42408de076c6764ddfe5322e363361f8eb76f791531e62209b09essdeep: 192:NjoMLMN9MZ/zKY9eWYvBqUlEhWMnvQbLDzgzDu4QJWVA:NjoMoezH9eDYUlQvQbLDkzDu4QJWVAtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T163B28463A85C4037F18A8BF309378BF549267C212BA09E4B6D89BF2C1C7518369F561Fsha3_384: 852a5b7df3658960722fc395e1ff4922f74bd693eabdae849694bb4939e3d9cb72f451b88a50b7a35940e18c7e3e18eeep_bytes: 6864154000e8eeffffff000000000000timestamp: 2011-09-09 13:40:35
Version Info:
Translation: 0x0409 0x04b0CompanyName: MicrosoftProductName: JudasFileVersion: 1.00ProductVersion: 1.00InternalName: PontaDeJudasOriginalFilename: PontaDeJudas.exe

TrojanDownloader:Win32/Banload.AHC also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Genome.a!c
Elastic	malicious (high confidence)
DrWeb	Trojan.DownLoad2.34947
MicroWorld-eScan	Gen:Trojan.Downloader.bm0@aqOjfIci
FireEye	Gen:Trojan.Downloader.bm0@aqOjfIci
Skyhigh	BehavesLike.Win32.Infected.mz
ALYac	Gen:Trojan.Downloader.bm0@aqOjfIci
VIPRE	Gen:Trojan.Downloader.bm0@aqOjfIci
Sangfor	Trojan.Win32.Downloader.Gen
CrowdStrike	win/malicious_confidence_70% (W)
BitDefender	Gen:Trojan.Downloader.bm0@aqOjfIci
K7GW	Trojan-Downloader ( 0055e3da1 )
K7AntiVirus	Trojan-Downloader ( 0055e3da1 )
BitDefenderTheta	AI:Packer.1CB0E5E01F
VirIT	Trojan.Win32.DownLoad2.BZSD
Symantec	Trojan.Gen
ESET-NOD32	a variant of Win32/TrojanDownloader.VB.PIG
APEX	Malicious
ClamAV	Win.Downloader.Barys-9869099-0
Kaspersky	Trojan-Downloader.Win32.Genome.ctpq
Alibaba	TrojanDownloader:Win32/Genome.9de5ec58
Rising	Downloader.VBEx!1.99EF (CLASSIC)
Sophos	Mal/VB-YZ
F-Secure	Trojan.TR/VB.Downloader.Gen
Zillya	Downloader.Genome.Win32.35517
TrendMicro	TROJ_GEN.F21EZL4
Emsisoft	Gen:Trojan.Downloader.bm0@aqOjfIci (B)
Ikarus	Trojan-Downloader.VB
MAX	malware (ai score=100)
Webroot	W32.Malware.Gen
Google	Detected
Avira	TR/VB.Downloader.Gen
Varist	W32/VB.CK_b.gen!Eldorado
Antiy-AVL	Trojan[Downloader]/Win32.Genome
Kingsoft	malware.kb.a.986
Microsoft	TrojanDownloader:Win32/Banload.AHC
Xcitium	TrojWare.Win32.TrojanDownloader.VB.PMEA@4rev5s
Arcabit	Trojan.Downloader.EDF7B8
ZoneAlarm	Trojan-Downloader.Win32.Genome.ctpq
GData	Gen:Trojan.Downloader.bm0@aqOjfIci
Cynet	Malicious (score: 99)
AhnLab-V3	Downloader/Win32.Genome.C52
McAfee	Artemis!6701043AFF30
DeepInstinct	MALICIOUS
VBA32	BScope.TrojanDownloader.Genome
Cylance	unsafe
Panda	Generic Malware
TrendMicro-HouseCall	TROJ_GEN.F21EZL4
Tencent	Win32.Trojan-Downloader.Genome.Qgil
Fortinet	W32/VB.ZIL!tr.dldr
AVG	Win32:Downloader-KFS [Trj]
Avast	Win32:Downloader-KFS [Trj]