Trojan

Should I remove “TrojanDownloader:Win32/Beebone.CC”?

Malware Removal

The TrojanDownloader:Win32/Beebone.CC is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What TrojanDownloader:Win32/Beebone.CC virus can do?

  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Executable file is packed/obfuscated with Themida
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine TrojanDownloader:Win32/Beebone.CC?


File Info:

name: EACFA63421EF3D1DBAB9.mlw
path: /opt/CAPEv2/storage/binaries/b251d462a0157da5341c9c2b540a6d724ac1c21925f4364cc7e97db43b4789fd
crc32: FFC2C1C7
md5: eacfa63421ef3d1dbab94c6e3170089b
sha1: 71d16f3b6f01e8debc6a436518addaf2d7046155
sha256: b251d462a0157da5341c9c2b540a6d724ac1c21925f4364cc7e97db43b4789fd
sha512: 2f9764512e6d0320a27908c4c6093c2290f9a728a2d8b70038af66ddb0c22b3c74e3698b31cb983ac5a32f97b8c21dc69c3eba954249096620fd8153a97d68b4
ssdeep: 98304:mQqP/wGT9zUtOCMhQ/a6iEpjmzEmJvIke6HP0WIVvkXPxA2D9Ck:UzUtOLhD6iWyzEmJV5cWrGDk
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T19C66AEB1770DB2CFD09A2674E623CD439A6D03F54210481FED6DB4B9BE92CA52287F25
sha3_384: 0af61f5268581e7e8a267b50dd7f1511958d98b63e83536f7c6c373fb158f0996f9348b892c82f7b51e4b9cecd4bf469
ep_bytes: 68381f4000e8eeffffff000080000000
timestamp: 2012-06-13 17:54:31

Version Info:

Translation: 0x0409 0x04b0
Comments: stalagmitic salir 7.8
CompanyName: stalagmitic salir 7.8
FileDescription: stalagmitic salir 7.8
LegalCopyright: stalagmitic salir 7.8
LegalTrademarks: stalagmitic salir 7.8
ProductName: stalagmitic salir 7.8
FileVersion: 5.06
ProductVersion: 5.06
InternalName: cryptoscopy
OriginalFilename: cryptoscopy.exe

TrojanDownloader:Win32/Beebone.CC also known as:

BkavW32.AIDetectMalware
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Bulz.755673
FireEyeGeneric.mg.eacfa63421ef3d1d
McAfeeArtemis!EACFA63421EF
MalwarebytesMalware.AI.3842262382
SangforTrojan.Win32.Save.a
K7AntiVirusNetWorm ( 700000151 )
AlibabaTrojan:Win32/VBMod.531ddde0
K7GWNetWorm ( 700000151 )
Cybereasonmalicious.421ef3
ArcabitTrojan.Bulz.DB87D9
BitDefenderThetaGen:NN.ZevbaF.36196.@J0@aq!wrxji
VirITTrojan.Win32.VB.ZRE
SymantecW32.Changeup
ESET-NOD32a variant of Generik.KLTILCO
APEXMalicious
ClamAVWin.Downloader.Barys-9809756-0
KasperskyTrojan-Downloader.Win32.VB.hbap
BitDefenderGen:Variant.Bulz.755673
NANO-AntivirusTrojan.Win32.Dwn.enpegt
AvastWin32:VB-ADJG [Trj]
TencentWin32.Trojan-Downloader.Vb.Aplw
SophosMal/Generic-S
F-SecureTrojan.TR/Graftor.30340.52
DrWebTrojan.DownLoader6.19258
VIPREGen:Variant.Bulz.755673
TrendMicroTROJ_GEN.R002C0DEO23
McAfee-GW-EditionBehavesLike.Win32.Rootkit.vh
Trapminemalicious.high.ml.score
EmsisoftGen:Variant.Bulz.755673 (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojanDownloader.VB.duea
WebrootW32.Obfuscated.Gen
GoogleDetected
AviraTR/Graftor.30340.52
MAXmalware (ai score=80)
Antiy-AVLTrojan[Downloader]/Win32.VB
XcitiumTrojWare.Win32.TrojanDownloader.VB.BWUV@4pctrs
MicrosoftTrojanDownloader:Win32/Beebone.CC
ZoneAlarmTrojan-Downloader.Win32.VB.hbap
GDataGen:Variant.Bulz.755673
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win.Reconyc.R581200
ALYacGen:Variant.Bulz.755673
VBA32TScope.Trojan.VB
Cylanceunsafe
PandaTrj/GdSda.A
TrendMicro-HouseCallTROJ_GEN.R002C0DEO23
RisingDownloader.VBEx!1.99EF (CLASSIC)
FortinetW32/VB.PSE!tr.dldr
AVGWin32:VB-ADJG [Trj]
DeepInstinctMALICIOUS

How to remove TrojanDownloader:Win32/Beebone.CC?

TrojanDownloader:Win32/Beebone.CC removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment