Categories: Trojan

TrojanDownloader:Win32/VB.HM (file analysis)

The TrojanDownloader:Win32/VB.HM is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanDownloader:Win32/VB.HM virus can do?

Executable code extraction
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine TrojanDownloader:Win32/VB.HM?


File Info:
crc32: 1FC15BF5md5: ba0b94e9ba823f00098dcf318047df58name: BA0B94E9BA823F00098DCF318047DF58.mlwsha1: 7bdc96732b19700eafc424f303345b258a346a5asha256: 866ec6c0ea598a9d20d569feeb760c11df8ca63857a7c0520fa3011c44fbb136sha512: 29f6dcffbf4696755e35659a79460f063e46c41ac0a1034bf2678a43db0992a36bfc9053801f6853f89eff42f8661e3324fa7ff5d30c2ed28f0408818dec5f54ssdeep: 768:mwtDiFqNtrk0RrzRszLiryEXEh53kJExsqZbkPpMKOztURtputybPh2PKacnW:mwtKerH+niOEm3qRqgF2PIWtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
InternalName: jeelmcdfasfFileVersion: 1.00CompanyName: x5927x9646x54c8x4f11ProductName: x660ex53c21ProductVersion: 1.00OriginalFilename: fdsafeefTranslation: 0x0804 0x04b0

TrojanDownloader:Win32/VB.HM also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.36058124
FireEye	Generic.mg.ba0b94e9ba823f00
CAT-QuickHeal	TrojanDownloader.Agent
Qihoo-360	Win32/Trojan.Downloader.27d
McAfee	Downloader-BRB.gen
Cylance	Unsafe
Zillya	Downloader.VB.Win32.197
Sangfor	Malware
K7AntiVirus	Trojan-Downloader ( 0057064f1 )
BitDefender	Trojan.GenericKD.36058124
K7GW	Trojan-Downloader ( 0057064f1 )
Cybereason	malicious.32b197
Cyren	W32/Downloader.DYIM-2343
Symantec	ML.Attribute.HighConfidence
TotalDefense	Win32/SillyDl.HQK
APEX	Malicious
Avast	Win32:Trojan-gen
Kaspersky	Trojan-Downloader.Win32.VB.hbpi
Alibaba	TrojanDownloader:Win32/Emogen.249e0a4a
NANO-Antivirus	Trojan.Win32.VB.vmle
ViRobot	Trojan.Win32.Downloader.45056.MU
Rising	Trojan.DL.Win32.VB.zwn (CLOUD)
Ad-Aware	Trojan.GenericKD.36058124
Sophos	ML/PE-A + Mal/Emogen-F
Comodo	TrojWare.Win32.Trojan.VB.~AJJ@mndg7
F-Secure	Trojan.TR/Agent.rrz.2
DrWeb	Trojan.DownLoad.44523
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.R002C0DA921
McAfee-GW-Edition	Downloader-BRB.gen
Emsisoft	Trojan.GenericKD.36058124 (B)
Ikarus	Trojan.Win32.VB
Jiangmin	TrojanDownloader.VB.czwd
Webroot	W32.Malware.Downloader
Avira	TR/Agent.rrz.2
MAX	malware (ai score=100)
Kingsoft	Win32.Troj.Agent.sd.(kcloud)
Microsoft	TrojanDownloader:Win32/VB.HM
Arcabit	Trojan.Generic.D226340C
ZoneAlarm	Trojan-Downloader.Win32.VB.hbpi
GData	Trojan.GenericKD.36058124
Cynet	Malicious (score: 85)
AhnLab-V3	Downloader/Win32.VB.R13315
BitDefenderTheta	AI:Packer.06B2C6F320
ALYac	Trojan.GenericKD.36058124
TACHYON	Trojan-Downloader/W32.VB-Agent.45056.CB
VBA32	Trojan.VBS.01829
Malwarebytes	Generic.Malware/Suspicious
Panda	Adware/AccesMembre
ESET-NOD32	a variant of Win32/TrojanDownloader.VB.QLX
TrendMicro-HouseCall	TROJ_GEN.R002C0DA921
Tencent	Malware.Win32.Gencirc.10b8647b
Yandex	Trojan.DL.VB!1thXttXfQw8
SentinelOne	Static AI – Malicious PE
eGambit	Generic.Downloader
Fortinet	W32/Agent.PQN!tr
AVG	Win32:Trojan-gen
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_100% (D)