Trojan

What is “TrojanDownloader:Win32/Beebone.JO”?

Malware Removal

The TrojanDownloader:Win32/Beebone.JO is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What TrojanDownloader:Win32/Beebone.JO virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine TrojanDownloader:Win32/Beebone.JO?


File Info:

name: 2D7CE8FAB3ACAB6F0DD1.mlw
path: /opt/CAPEv2/storage/binaries/be2706cf0083e90085a00a269aa2926a37bc7d4596dfeb2d7b586ba84f9ef9a2
crc32: 23B15FF9
md5: 2d7ce8fab3acab6f0dd12a6b446ca7a0
sha1: 9eb61d47c4a057bc0d9a6e0c82ba85f8874e2f52
sha256: be2706cf0083e90085a00a269aa2926a37bc7d4596dfeb2d7b586ba84f9ef9a2
sha512: c25bae4a0766d78e710393b99b7dcf6bcd18dad2e2a5e774634df98a4aebcd144b4ca8b073a70a1aff566aa719eb317ea800717cfd2e94eac2d0b747fcd1da99
ssdeep: 768:v9VV313vMT14sFms8kAnDaE27QNgPl2swra:vN1mayanGE2MNgtB
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1ECF25B97B542A071C4124B782EA7CBFA2523BCA65E031A0B7348777C5C72F609D9EE13
sha3_384: a922e15034a79b65f5d988b54181b0384f791d2b4f4018efe1e2ffa7eb1660cebb3a5d435a3cae6168df42532072b94a
ep_bytes: 6850114000e8f0ffffff000000000000
timestamp: 1970-01-01 00:00:00

Version Info:

LegalTrademarks: dxbyx
ProductName: hvgjb
FileVersion: 1.32
ProductVersion: 1.32
InternalName: ckwt
OriginalFilename: ckwt.exe

TrojanDownloader:Win32/Beebone.JO also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Jorik.lJQI
tehtrisGeneric.Malware
MicroWorld-eScanGen:Variant.Symmi.23177
FireEyeGeneric.mg.2d7ce8fab3acab6f
CAT-QuickHealTrojan.Beebone.D
McAfeeVBObfus.g
MalwarebytesMalware.AI.2330973585
VIPREGen:Variant.Symmi.23177
SangforSuspicious.Win32.Save.vb
K7AntiVirusTrojan ( 0040f5261 )
AlibabaWorm:Win32/VBObfus.3ba6b2d1
K7GWTrojan ( 0040f5261 )
Cybereasonmalicious.7c4a05
BitDefenderThetaGen:NN.ZevbaF.36744.cm0@a4AgNimi
SymantecW32.Changeup!gen44
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/VBObfus.QA
APEXMalicious
CynetMalicious (score: 100)
KasperskyWorm.Win32.WBNA.ipa
BitDefenderGen:Variant.Symmi.23177
NANO-AntivirusTrojan.Win32.bvrcuy.eaqdub
SUPERAntiSpywareTrojan.Agent/Gen-Vobfus
AvastWin32:VB-AIDB [Trj]
RisingWorm.WBNA!8.321 (TFE:3:qrmDOm73YBK)
EmsisoftGen:Variant.Symmi.23177 (B)
BaiduWin32.Trojan.Inject.aa
F-SecureTrojan.TR/Beebone.joemna
DrWebWin32.HLLW.Autoruner1.41368
ZillyaTrojan.Jorik.Win32.263666
TrendMicroWORM_VOBFUS.SML1
Trapminemalicious.high.ml.score
SophosMal/BeeBone-AE
IkarusTrojan.Win32.Jorik
GDataGen:Variant.Symmi.23177
JiangminTrojan/Jorik.hdtl
WebrootW32.Obfuscated.Gen
GoogleDetected
AviraTR/Beebone.joemna
MAXmalware (ai score=100)
Antiy-AVLWorm/Win32.WBNA.gen
KingsoftWin32.Worm.WBNA.ipa
ArcabitTrojan.Symmi.D5A89
ZoneAlarmWorm.Win32.WBNA.ipa
MicrosoftTrojanDownloader:Win32/Beebone.JO
VaristW32/Vobfus.JR.gen!Eldorado
AhnLab-V3Trojan/Win32.Jorik.R71426
VBA32TScope.Trojan.VB
ALYacGen:Variant.Symmi.23177
TACHYONTrojan/W32.VB-Jorik.36864.H
Cylanceunsafe
PandaW32/Vobfus.GEW.worm
TrendMicro-HouseCallWORM_VOBFUS.SML1
TencentTrojan.Win32.Dapato.u
YandexTrojan.GenAsa!9/7AYlXZe28
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Jorik.Fareit.qzu
FortinetW32/Injector.VOX!tr
AVGWin32:VB-AIDB [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (D)

How to remove TrojanDownloader:Win32/Beebone.JO?

TrojanDownloader:Win32/Beebone.JO removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment