Categories: Trojan

TrojanDownloader:Win32/Reconyc.BT!MTB malicious file

The TrojanDownloader:Win32/Reconyc.BT!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanDownloader:Win32/Reconyc.BT!MTB virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid

How to determine TrojanDownloader:Win32/Reconyc.BT!MTB?


File Info:
name: 2207CB940E7691A6CFD5.mlwpath: /opt/CAPEv2/storage/binaries/e254bc1c6782dc03b4b79151f8f6faf299de18417e8539f432be052d254eafcdcrc32: 11C2D88Dmd5: 2207cb940e7691a6cfd5f5f27152c8e6sha1: 1d82a5480e20edfe478d041f929142f89bace627sha256: e254bc1c6782dc03b4b79151f8f6faf299de18417e8539f432be052d254eafcdsha512: f761472ec118ac5a1e372f6343f0cd9fec3b2219b49a60eb17f3c6ad77e508301dc7b2b045cc55090a660c012cc53f4030631fda83eaad2b63ffd9e9ed4de911ssdeep: 98304:Z56ynUkJnBd+GAJIlX/tNsaO74tUpc0H0J895Nv55:Z5QkJnBZAJIlX/kVWJ8jptype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1D7668DABB650545CD66646F4414FC424A374B83A1711C9CBFD883FE92EBABE11A3E307sha3_384: b0be3a303851032223d6ae41b105260218ef29aa29c5c46f84268d5d021b9934410fbdd940b2e2d87b2299d3df7a0217ep_bytes: ff250020400000000000010101010100timestamp: 2023-04-30 03:06:05
Version Info:
Translation: 0x0000 0x04b0Comments: CompanyName: CAA智動化整合推廣處_one_one2air_Acam_pu_V1.21.03.2601FileDescription: 防水檢測FileVersion: 1.21.08.1005InternalName: AirTest.exeLegalCopyright: Copyright © AIM 智能製造研發總處 華北研發處LegalTrademarks: OriginalFilename: AirTest.exeProductName: 防水檢測ProductVersion: 1.21.08.1005Assembly Version: 1.21.8.1005

TrojanDownloader:Win32/Reconyc.BT!MTB also known as:

Bkav	W32.AIDetectMalware.CS
Lionic	Trojan.Win32.Reconyc.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	IL:Trojan.MSILZilla.27619
Skyhigh	Artemis!Trojan
McAfee	Artemis!2207CB940E76
Cylance	unsafe
Zillya	Downloader.Agent.Win32.514074
Sangfor	Downloader.Win32.Reconyc.V8zl
K7AntiVirus	Riskware ( 00584baa1 )
Alibaba	TrojanDownloader:Win32/Reconyc.6cfc8185
K7GW	Riskware ( 00584baa1 )
CrowdStrike	win/malicious_confidence_100% (W)
Arcabit	IL:Trojan.MSILZilla.D6BE3
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of Win32/TrojanDownloader.Agent.BUF
Cynet	Malicious (score: 99)
Kaspersky	UDS:Trojan.Win32.Reconyc.gen
BitDefender	IL:Trojan.MSILZilla.27619
Avast	FileRepMalware [Misc]
Tencent	Malware.Win32.Gencirc.13b51d38
Sophos	Troj/DwnLdr-YUJ
F-Secure	Heuristic.HEUR/AGEN.1349650
DrWeb	Trojan.MulDrop3.61066
VIPRE	IL:Trojan.MSILZilla.27619
TrendMicro	TROJ_GEN.R002C0DA924
Emsisoft	IL:Trojan.MSILZilla.27619 (B)
Google	Detected
Avira	HEUR/AGEN.1349650
Antiy-AVL	Trojan/Win32.Reconyc
Microsoft	TrojanDownloader:Win32/Reconyc.BT!MTB
ZoneAlarm	HEUR:Trojan.Win32.Reconyc.gen
GData	IL:Trojan.MSILZilla.27619
Varist	W32/MSIL_Troj.C.gen!Eldorado
AhnLab-V3	Downloader/Win.Reconyc.C5422211
VBA32	BScope.Trojan.Reconyc
Malwarebytes	Generic.Malware/Suspicious
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R002C0DA924
Rising	Downloader.Agent!1.B5A4 (CLOUD)
Ikarus	Trojan-Downloader.Win32.Agent
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Agent.BUF!tr.dldr
AVG	FileRepMalware [Misc]
Cybereason	malicious.80e20e
DeepInstinct	MALICIOUS