Trojan

What is “TrojanDownloader:Win32/Stration.A”?

Malware Removal

The TrojanDownloader:Win32/Stration.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What TrojanDownloader:Win32/Stration.A virus can do?

  • A process attempted to delay the analysis task.
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Deletes its original binary from disk
  • Attempts to modify proxy settings
  • Creates a copy of itself

Related domains:

z.whorecord.xyz
a.tomx.xyz
www6.huiderinjdasunlixsde.com

How to determine TrojanDownloader:Win32/Stration.A?


File Info:

crc32: 7B161406
md5: 376372d85ff44cee5fefd9fcaed5a7d6
name: 376372D85FF44CEE5FEFD9FCAED5A7D6.mlw
sha1: 038ed711064f7c8d4f2c4f413c0313e60b99120b
sha256: 4d87f2b1c247397fe0ebe85c5f7813d69cb1cdd52ef5cf986e448880791248c5
sha512: ec51afb342fb8418c88d56a0f05bcb3cabf4a9548de8162def808cfdcb47d63ed7d3f2b9695d1565416463158a7e578ef111027f8c48223052eb1f2d82f4dd4e
ssdeep: 192:dr+1v3Jr80H7rh9kozGP5jgGBUZUWBeO71/:UF3Jr8GjgmGqUWBeOh/
type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed

Version Info:

0: [No Data]

TrojanDownloader:Win32/Stration.A also known as:

LionicWorm.Win32.Warezov.kZhv
Elasticmalicious (high confidence)
DrWebWin32.HLLM.Limar.based
ClamAVWin.Trojan.Ag-1
CMCGeneric.Win32.376372d85f!MD
ALYacDeepScan:Generic.Stration.F768EE55
CylanceUnsafe
ZillyaWorm.Warezov.Win32.236
SangforTrojan.Win32.Stration.F768EE55
K7AntiVirusTrojan ( 0000f6f71 )
AlibabaWorm:Win32/Stration.098e4ecf
K7GWTrojan ( 0000f6f71 )
CyrenW32/Warezov.gen3!W32DL
SymantecW32.Stration@mm
ESET-NOD32Win32/Stration.KG
APEXMalicious
AvastFileRepMalware
CynetMalicious (score: 100)
KasperskyEmail-Worm.Win32.Warezov.fb
BitDefenderDeepScan:Generic.Stration.F768EE55
NANO-AntivirusTrojan.Win32.Warezov.fkvtes
ViRobotI-Worm.Win32.Warezov.Gen
MicroWorld-eScanDeepScan:Generic.Stration.F768EE55
TencentWin32.Worm-email.Warezov.Ljtz
Ad-AwareDeepScan:Generic.Stration.F768EE55
SophosW32/Stratio-AY
ComodoWorm.Win32.Stration.KG@1mu5
BitDefenderThetaAI:Packer.F6319D7A1D
VIPREBehavesLike.Win32.Malware.ssc (mx-v)
TrendMicroWORM_STRAT.GEN-3
McAfee-GW-EditionBehavesLike.Win32.PWSZbot.zh
FireEyeGeneric.mg.376372d85ff44cee
EmsisoftDeepScan:Generic.Stration.F768EE55 (B)
SentinelOneStatic AI – Malicious PE
JiangminI-Worm/Warezov.Gen.b
WebrootW32.Malware.Downloader
AviraWORM/Stration.BL.1
Antiy-AVLTrojan/Generic.ASMalwS.18AD8F0
KingsoftWin32.Troj.Generic_01.k.(kcloud)
MicrosoftTrojanDownloader:Win32/Stration.A
ArcabitDeepScan:Generic.Stration.F768EE55
GDataDeepScan:Generic.Stration.F768EE55
AhnLab-V3Worm/Win32.Stration.R7469
McAfeeW32/Stration.c
MAXmalware (ai score=100)
VBA32BScope.TrojanDropper.Dinwod
PandaTrj/SpamtaLoad.O
TrendMicro-HouseCallWORM_STRAT.GEN-3
RisingWorm.Mail.Warezov.cj (CLASSIC)
YandexTrojan.Opnis.Gen!Pac.45
IkarusEmail-Worm.Win32.Warezov
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Stration.DS@mm
AVGFileRepMalware

How to remove TrojanDownloader:Win32/Stration.A?

TrojanDownloader:Win32/Stration.A removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment