Categories: Trojan

TrojanDownloader:Win32/Unruy.R malicious file

The TrojanDownloader:Win32/Unruy.R is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanDownloader:Win32/Unruy.R virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Yara rule detections observed from a process memory dump/dropped files/CAPE
Dynamic (imported) function loading detected
Enumerates running processes
Reads data out of its own binary image
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid

How to determine TrojanDownloader:Win32/Unruy.R?


File Info:
name: 2F8A45708DAC8A8E4AF1.mlwpath: /opt/CAPEv2/storage/binaries/d0e8c7365ddc9ae7638b7062239d5b4c2457afe847d154222ad0fd312333820dcrc32: F351B486md5: 2f8a45708dac8a8e4af10009c9de1984sha1: 2dd84c69864d5ebdd5ad8a93023959d52865ae1esha256: d0e8c7365ddc9ae7638b7062239d5b4c2457afe847d154222ad0fd312333820dsha512: f7420405434741a5da749429bdf53d2ba00b62d1be0ecef6314ab0901d6e368d5135d26da62321d00e503686a4ab1a2d942776c6a0fa8206cca0ae9d313a5606ssdeep: 6144:G/uIe1iOvQATHgDg8h/1WKDKQO1dAqtTB83Lw:qMUU7Kv9wwJqtTwwtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T184249D65B5C9C2F2CA421C34C5FC3B3EE3A6F9205B2A61A36345CF5D2D33981BB5560Asha3_384: 0d3d2376e23151257a5932e988eff30b0efe68c1045bda5eec63d7700924efd2d25b58aace46abdff93b33b2adf84e3fep_bytes: 558bec6aff68f8cb420068c81a420064timestamp: 2011-07-24 07:04:31
Version Info:
0: [No Data]

TrojanDownloader:Win32/Unruy.R also known as:

Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
FireEye	Generic.mg.2f8a45708dac8a8e
McAfee	GenericRXAA-WR!2F8A45708DAC
Cylance	Unsafe
K7AntiVirus	Trojan-Downloader ( 0037ccd41 )
K7GW	Trojan-Downloader ( 0037ccd41 )
CrowdStrike	win/malicious_confidence_60% (D)
Baidu	Win32.Trojan.Kryptik.ak
Cyren	W32/Unruy.C.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/TrojanDownloader.Unruy.CO
APEX	Malicious
ClamAV	Win.Malware.Unruy-9840577-0
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Unruy.5
SUPERAntiSpyware	Trojan.Agent/Gen-Unruy
MicroWorld-eScan	Gen:Variant.Unruy.5
Avast	Win32:Agent-ANGA [Trj]
Ad-Aware	Gen:Variant.Unruy.5
Sophos	ML/PE-A + Mal/GamePSW-L
Comodo	TrojWare.Win32.TrojanClicker.Cycler.CP@44jnry
DrWeb	BackDoor.Bandito.2100
VIPRE	Trojan.Win32.Unruy.sme (v)
TrendMicro	TROJ_UNRUY.SME1
McAfee-GW-Edition	BehavesLike.Win32.PWSZbot.dh
Emsisoft	Gen:Variant.Unruy.5 (B)
Ikarus	Backdoor.Win32.Banito
GData	Gen:Variant.Unruy.5
Jiangmin	Trojan/Generic.oqfg
Avira	TR/Dldr.Unruy.RA
Arcabit	Trojan.Unruy.5
Microsoft	TrojanDownloader:Win32/Unruy.R
AhnLab-V3	Trojan/Win.HDC.R454283
BitDefenderTheta	Gen:NN.ZexaF.34062.nqX@aWI0hGdb
ALYac	Gen:Variant.Unruy.5
MAX	malware (ai score=84)
VBA32	suspected of Trojan.Downloader.gen
Malwarebytes	Malware.AI.3523994182
TrendMicro-HouseCall	TROJ_UNRUY.SME1
Rising	Malware.Obscure/Heur!1.9E03 (CLASSIC)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Banito.CN!tr
AVG	Win32:Agent-ANGA [Trj]
Cybereason	malicious.08dac8
Panda	Trj/Genetic.gen