Categories: Trojan

TrojanDownloader:Win32/Esplor.B (file analysis)

The TrojanDownloader:Win32/Esplor.B is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanDownloader:Win32/Esplor.B virus can do?

Executable code extraction
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Uses Windows utilities for basic functionality
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine TrojanDownloader:Win32/Esplor.B?


File Info:
crc32: EDB69A55md5: 1988c6451a1fe1f362bd7235be3381caname: 1988C6451A1FE1F362BD7235BE3381CA.mlwsha1: dd2e863c86103987125722f5a6169138a253b71esha256: 8ad9ad0e6d381476666507d0cda7ce12ffaeddd0fb121683e78ac95e5c68dcb0sha512: 1bf44d061e35bc61f430f9658d73134f5777a830a91333fb10f37fe82df803302b79326955f5f5422ec0f8077b2f8d9789ae8b4361131e6eb1f27fcc615bea78ssdeep: 3072:rX+T5rl9vIqiEVKPN8pi762uJUR2cAd1ois:ebAqiEVSN8pi22MncA/stype: MS-DOS executable
Version Info:
Translation: 0x0804 0x04b0LegalCopyright: Copyright ?2004 Steve McMahon for vbAccelerator.comInternalName: serverFileVersion: 1.00.0149CompanyName: vbAcceleratorLegalTrademarks: vbAccelerator and vbAccelerator.com are trademarks of vbAccelerator Ltd.  All Rights Reserved.Comments: vbAccelerator New Desktop SampleProductName: vbAccelerator New Desktop SampleProductVersion: 1.00.0149FileDescription: vbAccelerator New Desktop SampleOriginalFilename: server.DAT

TrojanDownloader:Win32/Esplor.B also known as:

Bkav	W32.AIDetectVM.malware5
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Trojan.Heur.ii0@6UeDOocbd
FireEye	Generic.mg.1988c6451a1fe1f3
CAT-QuickHeal	Trojan.Agent
Qihoo-360	Win32/Trojan.Downloader.459
ALYac	Gen:Trojan.Heur.ii0@6UeDOocbd
Cylance	Unsafe
VIPRE	Trojan.WIn32.Esplor (v)
Sangfor	Malware
CrowdStrike	win/malicious_confidence_100% (D)
BitDefender	Gen:Trojan.Heur.ii0@6UeDOocbd
K7GW	Trojan ( 00544ddf1 )
K7AntiVirus	Trojan ( 00544ddf1 )
BitDefenderTheta	AI:Packer.DD64E3AD1D
Cyren	W32/Trojan.EHON-0240
Symantec	SecurityRisk.Downldr
ESET-NOD32	a variant of Win32/VB.OFZ
APEX	Malicious
Paloalto	generic.ml
ClamAV	Win.Trojan.Agent-7657314-0
Kaspersky	Trojan-Downloader.Win32.VB.hbvt
Alibaba	TrojanDownloader:Win32/Esplor.7840459f
NANO-Antivirus	Trojan.Win32.Esplor.bojof
ViRobot	Trojan.Win32.Downloader.131072.BC
Rising	Trojan.Esplor!1.A26B (CLASSIC)
Ad-Aware	Gen:Trojan.Heur.ii0@6UeDOocbd
Sophos	ML/PE-A + Mal/VBbl-PN
Comodo	TrojWare.Win32.Injector.AXP@53h72e
DrWeb	Trojan.KillProc.6607
TrendMicro	TROJ_ESPLOR.SMD
McAfee-GW-Edition	BehavesLike.Win32.Autorun.ct
Emsisoft	Gen:Trojan.Heur.ii0@6UeDOocbd (B)
Ikarus	Trojan.Win32.VB
Jiangmin	TrojanDownloader.VB.ehbg
Webroot	W32.Malware.Downloader
Avira	TR/VB.Downloader.Gen
MAX	malware (ai score=99)
Microsoft	TrojanDownloader:Win32/Esplor.B
Arcabit	Trojan.Heur.ED1E29E
AhnLab-V3	Trojan/Win32.Xema.C6967
ZoneAlarm	Trojan-Downloader.Win32.VB.hbvt
GData	Gen:Trojan.Heur.ii0@6UeDOocbd
Cynet	Malicious (score: 100)
Acronis	suspicious
McAfee	Artemis!1988C6451A1F
VBA32	Trojan.VBRA.012772
Malwarebytes	Malware.Heuristic.1003
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	TROJ_ESPLOR.SMD
Tencent	Malware.Win32.Gencirc.114c1d4f
Yandex	Trojan.GenAsa!iR5S8SHfbnQ
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_99%
Fortinet	W32/VB.OFZ!tr
AVG	Win32:Trojan-gen
Cybereason	malicious.51a1fe
Avast	Win32:Trojan-gen
MaxSecure	Trojan.Buzus.enfq