Categories: Trojan

TrojanDropper.Flystud information

The TrojanDropper.Flystud is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanDropper.Flystud virus can do?

Executable code extraction
Creates RWX memory
Detected script timer window indicative of sleep style evasion
Starts servers listening on 0.0.0.0:29999
Expresses interest in specific running processes
Reads data out of its own binary image
Drops a binary and executes it
Unconventionial language used in binary resources: Chinese (Simplified)
A scripting utility was executed
Uses Windows utilities for basic functionality
Creates a hidden or system file
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine TrojanDropper.Flystud?


File Info:
crc32: E72813CDmd5: 9567569e5eb90abfc511a2dc5a319426name: 9567569E5EB90ABFC511A2DC5A319426.mlwsha1: db98df4aa31def4af6b20010d5fc93e5e7ad858csha256: 3bd3ec58acbde34cdfc9827c2c52ec8620f8279d7c8b7524cd5414edcfb8cd05sha512: 3234968c443dd7a0a3ac55e392bd1c9952e136f21f96cc536127fb52b95de0f86142da398d1882c43c6531e5a0d31b8f41c4a205deb5173c0e2a23a1baecca95ssdeep: 49152:AvHcdCeifPbVxgD6V5QusvD/DX+y4onCYDoD5:6TfbVxU6V5QusvD/D+donCYUVtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

TrojanDropper.Flystud also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
DrWeb	Win32.HLLP.ZloyFly.2
Cynet	Malicious (score: 100)
CAT-QuickHeal	Risktool.Flystudio.17324
ALYac	Dropped:Trojan.GenericKD.36027071
Cylance	Unsafe
CrowdStrike	win/malicious_confidence_100% (W)
Cybereason	malicious.e5eb90
Cyren	W32/Autorun.CKVB-8929
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Packed.FlyStudio potentially unwanted
APEX	Malicious
Avast	Win32:Evo-gen [Susp]
ClamAV	Win.Malware.Vjadtre-6840658-0
Kaspersky	Trojan-Dropper.Win32.Flystud.d
BitDefender	Dropped:Trojan.GenericKD.36027071
NANO-Antivirus	Riskware.Win32.FlyStudio.dhaj
ViRobot	Win32.FlyStud.A
MicroWorld-eScan	Dropped:Trojan.GenericKD.36027071
Tencent	Trojan.Win32.Flystud.a
Ad-Aware	Dropped:Trojan.GenericKD.36027071
Sophos	Mal/Generic-S
Comodo	TrojWare.Win32.TrojanDropper.Agent.~JJB@1ibpfm
F-Secure	Trojan.TR/Dropper.Gen
VIPRE	Trojan.Win32.Generic.pak!cobra
FireEye	Generic.mg.9567569e5eb90abf
Emsisoft	Application.Generic (A)
SentinelOne	Static AI – Malicious PE
Jiangmin	TrojanDropper.Flystud.btu
Avira	TR/Dropper.Gen
eGambit	Trojan.Generic
Antiy-AVL	GrayWare/Win32.FlyStudio.b
Microsoft	Trojan:Win32/Ditertag.A
Gridinsoft	Malware.Win32.Gen.sm!s1
Arcabit	Trojan.Generic.D225BABF
ZoneAlarm	Trojan-Dropper.Win32.Flystud.d
GData	Win32.Trojan.FlyStudio.A
AhnLab-V3	Dropper/Flystud.1490549
Acronis	suspicious
McAfee	MultiDropper-TI
MAX	malware (ai score=84)
VBA32	TrojanDropper.Flystud
Malwarebytes	AutoKMS.HackTool.Patcher.DDS
Rising	Dropper.Agent.wh (RDMK:cmRtazr2h9dkcalnt8nwxPcQdu21)
Ikarus	Trojan.Win32.FlyStudio
Fortinet	W32/Generic.AP.14793D8!tr
AVG	Win32:Evo-gen [Susp]