Categories: Trojan

TrojanDownloader:Win32/Plingky.A malicious file

The TrojanDownloader:Win32/Plingky.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanDownloader:Win32/Plingky.A virus can do?

Uses Windows utilities for basic functionality
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Uses Windows utilities to create a scheduled task
Attempted to write directly to a physical drive
Attempts to modify proxy settings
Deletes executed files from disk
Collects information to fingerprint the system
Uses suspicious command line tools or Windows utilities
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine TrojanDownloader:Win32/Plingky.A?


File Info:
name: EAE12779FEBF6C8CB51B.mlwpath: /opt/CAPEv2/storage/binaries/8343d3ca4596d46d1c3667022902499f9ff2c3746493f39d710c4f06c670f6f0crc32: D174C2B6md5: eae12779febf6c8cb51b4cadbae20fecsha1: 2d3fe4fe03cae9a0a3f1c965b6996c04eef5690dsha256: 8343d3ca4596d46d1c3667022902499f9ff2c3746493f39d710c4f06c670f6f0sha512: a57a68fd6a3c69be48fe02bfda2a0be44392345d9ca4463e72ba347c6ada0d911c4949059f309b17167d1b35218b74beda8c6123efb964e4757dea6a5af56e8essdeep: 12288:pl41zfEOYGxSp+GKMXExFVWIaK3sojsif:T6oOx0KMwVWIaetype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1B7A4CFA2E147ACD0F1A3C03D14FC9639B16D9E60D247C9E69B30FF4529EBC5DAA39118sha3_384: 4e8528708e8e1cb7147d66023096744e1f40dde9dbf18ef93dc5cfc1cd15e2aa73536747e431167e19b8ed3d296972e5ep_bytes: 5589e583ec18c7042402000000ff1508timestamp: 2011-02-01 15:08:39
Version Info:
0: [No Data]

TrojanDownloader:Win32/Plingky.A also known as:

Bkav	W32.AIDetectMalware
DrWeb	Trojan.MulDrop2.62828
MicroWorld-eScan	Dropped:Trojan.Generic.5654095
FireEye	Generic.mg.eae12779febf6c8c
CAT-QuickHeal	Downldr.Plingky.S4044679
Skyhigh	BehavesLike.Win32.VirRansom.gc
ALYac	Dropped:Trojan.Generic.5654095
Malwarebytes	Bladabindi.Backdoor.Bot.DDS
Zillya	Trojan.Agent.Win32.166142
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 001ff8401 )
BitDefender	Dropped:Trojan.Generic.5654095
K7GW	Trojan ( 001ff8401 )
Cybereason	malicious.e03cae
BitDefenderTheta	Gen:NN.ZexaCO.36792.BiW@aelH6fci
VirIT	Trojan.Win32.Agent.AGCM
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Agent.SGX
Cynet	Malicious (score: 100)
APEX	Malicious
ClamAV	Win.Trojan.Agent-424755
Kaspersky	Trojan-PSW.Win32.Bjlog.dwcz
NANO-Antivirus	Trojan.Win32.Agent.ddcsr
Tencent	Trojan.Win32.Downloader.cc
Sophos	Mal/Generic-S
F-Secure	Trojan.TR/Rogue.38215264
Baidu	Win32.Trojan.Agent.du
VIPRE	Dropped:Trojan.Generic.5654095
TrendMicro	TROJ_DROPR.SMIL
Trapmine	malicious.high.ml.score
Emsisoft	Dropped:Trojan.Generic.5654095 (B)
SentinelOne	Static AI – Malicious PE
GData	Win32.Trojan.PSE.13LF282
Jiangmin	Trojan/Generic.cqoh
Webroot	W32.Malware.Downloader
Varist	W32/A-f329c2b0!Eldorado
Avira	TR/Rogue.38215264
Antiy-AVL	Trojan[Dropper]/Win32.Agent
Kingsoft	malware.kb.a.1000
Xcitium	TrojWare.Win32.Agent.sgx@4i1tyd
Arcabit	Trojan.Generic.D56464F
ZoneAlarm	Trojan-PSW.Win32.Bjlog.dwcz
Microsoft	TrojanDownloader:Win32/Plingky.A
Google	Detected
AhnLab-V3	Dropper/Win32.OnlineGameHack.R18678
McAfee	Downloader-CSV
MAX	malware (ai score=84)
DeepInstinct	MALICIOUS
VBA32	BScope.Trojan.Tiggre
Cylance	unsafe
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	TROJ_DROPR.SMIL
Rising	Trojan.DL.Win32.GenFxj.bw (CLASSIC)
Yandex	Trojan.GenAsa!kA7aDTmHVw8
Ikarus	Trojan-Dropper.Agent
Fortinet	W32/Oficla.NK!tr
AVG	Win32:Trojan-gen
Avast	Win32:Trojan-gen
CrowdStrike	win/malicious_confidence_100% (W)