Categories: Trojan

TrojanDropper.Miner (file analysis)

The TrojanDropper.Miner is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanDropper.Miner virus can do?

Reads data out of its own binary image
Unconventionial language used in binary resources: Chinese (Simplified)
Uses Windows utilities for basic functionality
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine TrojanDropper.Miner?


File Info:
crc32: B3A522EBmd5: 83365c3fec3aac3b1ddbb28abae165c4name: 83365C3FEC3AAC3B1DDBB28ABAE165C4.mlwsha1: 40bfde8e54f42e92e0dd8b9cc8dc3087c034af9esha256: bcc819ac9a440f54436c6307d524c9fe05e7872c6eb6dfc29b44429b284e210esha512: c146775af3493ed4c530e70c8c30c358b33e4074796acb3ebf1245475908eadc08a918018889c233074597037200dbcba3d0dc81621f1c7fca2a242d1a203adcssdeep: 98304:ObS3/8tUPAEBtI/I3t2n0FusTDmJHpa5ZKyzvWgdW2PRQUIi3Ayi4L:Ou3/0zEBtg420FBb2ONdbP5IvwLtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

TrojanDropper.Miner also known as:

K7AntiVirus	Adware ( 00576c861 )
Elastic	malicious (high confidence)
DrWeb	Trojan.BtcMine.3570
Cynet	Malicious (score: 100)
CAT-QuickHeal	Script.Trojan.Agent.40688
ALYac	Trojan.Agent.CoinMiner
Cylance	Unsafe
Sangfor	Riskware.Win32.Agent.ky
Alibaba	TrojanDropper:Win64/Miners.0da6aa43
K7GW	Adware ( 00576c861 )
Cybereason	malicious.fec3aa
Cyren	W32/Trojan.XJCA-2479
Symantec	Trojan.Gen.MBT
ESET-NOD32	multiple detections
APEX	Malicious
Avast	Win64:CoinminerX-gen [Trj]
Kaspersky	UDS:DangerousObject.Multi.Generic
BitDefender	Trojan.Rasftuby.Gen.14
NANO-Antivirus	Trojan.Win64.BtcMine.ixcspa
MicroWorld-eScan	Trojan.Rasftuby.Gen.14
Tencent	Win32.Trojan.Ncminer.Fxzc
Ad-Aware	Trojan.Rasftuby.Gen.14
Sophos	Mal/Generic-S (PUA)
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Ransom_Ako.R002C0DGU21
McAfee-GW-Edition	BehavesLike.Win32.Generic.tc
FireEye	Generic.mg.83365c3fec3aac3b
Emsisoft	Trojan.Rasftuby.Gen.14 (B)
SentinelOne	Static AI – Suspicious SFX
Avira	TR/CoinMiner.thjvp
Antiy-AVL	Trojan/Generic.ASBOL.C6B4
Microsoft	Ransom:Win32/Ako
GData	Trojan.Rasftuby.Gen.14
McAfee	Artemis!83365C3FEC3A
MAX	malware (ai score=82)
VBA32	TrojanDropper.Miner
Panda	Trj/CI.A
TrendMicro-HouseCall	Ransom_Ako.R002C0DGU21
Rising	HackTool.MinerCfg/JSON!1.CABA (CLASSIC)
Yandex	Trojan.Agent!7ZhYY96Utk4
Ikarus	Trojan.Win64.Themida
MaxSecure	Trojan.Malware.73445238.susgen
Fortinet	Riskware/Application
AVG	Win64:CoinminerX-gen [Trj]