Categories: Trojan

TrojanDropper:Win32/Hokobot.A!dha (file analysis)

The TrojanDropper:Win32/Hokobot.A!dha is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanDropper:Win32/Hokobot.A!dha virus can do?

Reads data out of its own binary image
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine TrojanDropper:Win32/Hokobot.A!dha?


File Info:
crc32: 53221E34md5: 826b772c81f41505f96fc18e666b1acdname: 6674ffe375f8ab54cfa2a276e4a39b414cf327e0b00733c215749e8a94385c63sha1: 3d1ebf3d6dfaf1d3c047b8e3766ec02a1b95c92dsha256: 6674ffe375f8ab54cfa2a276e4a39b414cf327e0b00733c215749e8a94385c63sha512: 1844e731ad9b32aef8c7527b50f9b55585770cb3f7980c50807a1a447d23f197a74e31f7777f1a26a508f9d21fc36182a60b231b36125d65c90e1751a5be2c9fssdeep: 12288:21DqIZOJDxV+P9oxGgm9haTCt231b7XZhmwXEvb4PmLGuyHvv:2hq9Eg8STCtE1nphmwzuLGFHXtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: xa9 Microsoft Corporation. All rights reserved.InternalName: rundll32.exeFileVersion: 2, 0, 0, 2CompanyName: Microsoft CorporationSpecialBuild: 2, 0, 0, 2Comments: Windows Help ServiceProductName: Microsoftxae Windowsxae Operating SystemProductVersion: 2, 0, 0, 2FileDescription: Windows Help ServiceOriginalFilename: rundll32.exeTranslation: 0x0409 0x04b0

TrojanDropper:Win32/Hokobot.A!dha also known as:

Bkav	W32.EncapterLTE.Trojan
MicroWorld-eScan	Gen:Variant.Graftor.188364
FireEye	Generic.mg.826b772c81f41505
ALYac	Gen:Variant.Graftor.188364
VIPRE	Trojan.Win32.Generic!BT
AegisLab	Trojan.Win32.Agent.tpn8
K7AntiVirus	Trojan ( 004bb6551 )
BitDefender	Gen:Variant.Graftor.188364
K7GW	Trojan ( 004bb6551 )
CrowdStrike	win/malicious_confidence_80% (W)
TrendMicro	BKDR_EXPLOSIVE.A
BitDefenderTheta	Gen:NN.ZexaF.33558.Wq3@aq4PGkdO
F-Prot	W32/Explosive.D.gen!Eldorado
Symantec	Trojan.Explod
ESET-NOD32	Win32/Agent.PTM
APEX	Malicious
Paloalto	generic.ml
ClamAV	Win.Trojan.Explosive-6539544-0
GData	Gen:Variant.Graftor.188364
Kaspersky	Trojan.Win32.Agent.adsct
Alibaba	TrojanDropper:Win32/Hokobot.3edf1fc8
NANO-Antivirus	Trojan.Win32.Agent.ctqhvz
ViRobot	Trojan.Win32.Explosive.801467
Rising	Dropper.Hokobot!8.469E (TFE:5:NiDhZdgYJJI)
Ad-Aware	Gen:Variant.Graftor.188364
Sophos	Troj/Explos-E
Comodo	Malware@#u2vprdbneotb
F-Secure	Trojan.TR/Agent.801467
DrWeb	Trojan.DownLoader9.11247
Zillya	Trojan.Agent.Win32.441529
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.Generic.bm
CMC	Trojan.Win32.Agent!O
Emsisoft	Gen:Variant.Graftor.188364 (B)
Ikarus	Trojan-Dropper.Agent
Cyren	W32/Explosive.D.gen!Eldorado
Jiangmin	Trojan/Agent.ingw
Webroot	W32.Trojan.Explod
Avira	TR/Agent.801467
MAX	malware (ai score=100)
Antiy-AVL	Trojan/Win32.Agent
Endgame	malicious (high confidence)
Arcabit	Trojan.Graftor.D2DFCC
AhnLab-V3	Trojan/Win32.Agent.C779672
ZoneAlarm	Trojan.Win32.Agent.adsct
Microsoft	TrojanDropper:Win32/Hokobot.A!dha
McAfee	Generic.dgg
VBA32	Trojan.Agent
Cylance	Unsafe
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	BKDR_EXPLOSIVE.A
Yandex	Trojan.Agent!XxK1outbKSg
eGambit	Generic.Malware
Fortinet	W32/Agent.ADSCT!tr
AVG	Win32:Explosive-I [Trj]
Cybereason	malicious.c81f41
Avast	Win32:Explosive-I [Trj]
Qihoo-360	Win32/Trojan.efc