Categories: Trojan

TrojanDownloader:Win32/Nystprac.A malicious file

The TrojanDownloader:Win32/Nystprac.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanDownloader:Win32/Nystprac.A virus can do?

Presents an Authenticode digital signature
Possible date expiration check, exits too soon after checking local time
Network activity detected but not expressed in API logs
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine TrojanDownloader:Win32/Nystprac.A?


File Info:
crc32: EAB5A027md5: e58319e520f863376401863669881bf4name: E58319E520F863376401863669881BF4.mlwsha1: 31f9d65ecf7b6a2010ad59e8a58c3d0a7084dd28sha256: 300b09dbb4ae19a444102c6347b02495c9b081fde5796ad61fd7dc096fc5d6d1sha512: e8c55b52675f76378085421f6ffd57d2ab811dca84b223b9f652eb36b7be7ddfa18796c8248304ba2db8d34601a7d034cc87c82a807abe0c01511a6716932c1assdeep: 384:4I4ul1d4WTk9GRWFRN+zTnpRfXTUyOmcZ5sYawI7JReeM2dGoth5JNNzFwhhifW:4I4mFaGU5KTmmisTPNLdGotn3whJtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

TrojanDownloader:Win32/Nystprac.A also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
ClamAV	Win.Trojan.Gh0stRAT-9854656-0
ALYac	Gen:Variant.Ulise.135793
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
BitDefender	Gen:Variant.Ulise.135793
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/TrojanDownloader.Agent.CQX
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.Win32.Generic
NANO-Antivirus	Trojan.Win32.Inject.chipuz
MicroWorld-eScan	Gen:Variant.Ulise.135793
Ad-Aware	Gen:Variant.Ulise.135793
Sophos	Mal/PePatch-K
Comodo	TrojWare.Win32.Farfli.CQ@7y93vk
BitDefenderTheta	Gen:NN.ZexaF.34684.byY@aulcBCoi
McAfee-GW-Edition	Packed-MZ!E58319E520F8
FireEye	Generic.mg.e58319e520f86337
Emsisoft	Gen:Variant.Ulise.135793 (B)
SentinelOne	Static AI – Malicious PE
Avira	TR/Crypt.XPACK.Gen
eGambit	PE.Heur.InvalidSig
Microsoft	TrojanDownloader:Win32/Nystprac.A
Arcabit	Trojan.Ulise.D21271
GData	Gen:Variant.Ulise.135793
Acronis	suspicious
McAfee	Packed-MZ!E58319E520F8
MAX	malware (ai score=84)
VBA32	Backdoor.Farfli
Malwarebytes	Malware.AI.521088740
Rising	Backdoor.Zegost!8.177 (TFE:1:v1b0qrY80QM)
Yandex	Trojan.GenAsa!jyx+fvnRphc
Fortinet	W32/SERVSTART.D!tr