Categories: Trojan

TrojanDropper:Win32/Wykcores.A removal

The TrojanDropper:Win32/Wykcores.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanDropper:Win32/Wykcores.A virus can do?

Sample contains Overlay data
Drops a binary and executes it
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Creates a copy of itself
Deletes executed files from disk

How to determine TrojanDropper:Win32/Wykcores.A?


File Info:
name: 0D38D6C2B9EB817B40AF.mlwpath: /opt/CAPEv2/storage/binaries/175f1892ac77c068b7dfbfc0519a81036932ab35708708a5825dcd4eb7a57072crc32: 3D4FAF29md5: 0d38d6c2b9eb817b40afc4272545a43bsha1: 0fbb7a6406eb3df90a08db163163a8a666ab3c28sha256: 175f1892ac77c068b7dfbfc0519a81036932ab35708708a5825dcd4eb7a57072sha512: ed9e07dc69b5b79e8bf6b900489b4121505b14177e320ce71f6c72641ab578549d7e6d6940720596eb660e41a62a66ce3fb9eca529965f101631a6975e8da04essdeep: 1536:kGVLqFpLsXNRqmVsbnqjL1t7eUbc1wQ1Heq:kjVyFVOSzblQBeqtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T182735B53E6C098F1C011CDFC5D2AD298A66AB9E1ED3D64A5FEDE0ECCCC6A272141D247sha3_384: c34727a7d9f090f9fa6b7cb0912e8525a98a7572b7444fa88257cdc8538804aae55d21948736aa99ebda6231b1f25bcbep_bytes: 558bec83c4f053b81c434000e82ff6fftimestamp: 1992-06-19 22:22:17
Version Info:
0: [No Data]

TrojanDropper:Win32/Wykcores.A also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Agent.Y!c
MicroWorld-eScan	Dropped:Generic.Malware.F!dld!g.4EAF11D7
FireEye	Generic.mg.0d38d6c2b9eb817b
Skyhigh	BehavesLike.Win32.Generic.lh
ALYac	Dropped:Generic.Malware.F!dld!g.4EAF11D7
Malwarebytes	Malware.AI.235411407
VIPRE	Dropped:Generic.Malware.F!dld!g.4EAF11D7
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 00016f021 )
BitDefender	Dropped:Generic.Malware.F!dld!g.4EAF11D7
K7GW	Trojan ( 00016f021 )
Cybereason	malicious.406eb3
VirIT	Backdoor.Win32.Agent.AFXW
Symantec	Backdoor.Trojan
Elastic	malicious (high confidence)
ESET-NOD32	Win32/Wykcores.A
Cynet	Malicious (score: 100)
APEX	Malicious
ClamAV	Win.Trojan.Agent-715683
Kaspersky	Backdoor.Win32.Agent.anvj
Alibaba	TrojanDropper:Win32/Wykcores.cfc150cb
NANO-Antivirus	Trojan.Win32.Agent.cwryc
ViRobot	Backdoor.Win32.A.Agent.73483
Rising	Backdoor.Agent!8.C5D (TFE:3:OIaOQUjPhNV)
Emsisoft	Dropped:Generic.Malware.F!dld!g.4EAF11D7 (B)
F-Secure	Heuristic.HEUR/AGEN.1327611
DrWeb	BackDoor.Siggen2.146
Zillya	Backdoor.Agent.Win32.27175
TrendMicro	BKDR_AGENT.AUFL
Trapmine	malicious.high.ml.score
Sophos	Troj/Wykcores-A
SentinelOne	Static AI – Malicious PE
Jiangmin	Backdoor/Agent.cpjo
Webroot	W32.Dropper.Gen
Avira	HEUR/AGEN.1327611
MAX	malware (ai score=100)
Antiy-AVL	Trojan/Win32.Agent
Kingsoft	malware.kb.a.1000
Microsoft	TrojanDropper:Win32/Wykcores.A
Xcitium	Malware@#2zwe1ffx6dpep
Arcabit	Generic.Malware.F!dld!g.4EAF11D7
ZoneAlarm	Backdoor.Win32.Agent.anvj
GData	Dropped:Generic.Malware.F!dld!g.4EAF11D7
Google	Detected
AhnLab-V3	Backdoor/Win32.Etso.R9545
McAfee	BackDoor-EYO
DeepInstinct	MALICIOUS
VBA32	BScope.TrojanDropper.Dorifel
Cylance	unsafe
Panda	Generic Malware
TrendMicro-HouseCall	BKDR_AGENT.AUFL
Tencent	Malware.Win32.Gencirc.13bdaf1f
Yandex	Trojan.GenAsa!v/m2Rwsn/d8
Ikarus	Trojan.Win32.Genome
Fortinet	W32/Agent.ANVJ!tr.bdr
BitDefenderTheta	AI:Packer.16D655391F
AVG	Win32:Trojan-gen
Avast	Win32:Trojan-gen
CrowdStrike	win/malicious_confidence_100% (W)