Categories: SpyTrojan

TrojanSpy6384.1288 information

The TrojanSpy6384.1288 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanSpy6384.1288 virus can do?

Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
CAPE detected the shellcode get eip malware family
Yara detections observed in process dumps, payloads or dropped files

How to determine TrojanSpy6384.1288?


File Info:
name: B8B78B6ED93E2A4CDF77.mlwpath: /opt/CAPEv2/storage/binaries/89f84ac007de6e8ee235366fb256553df9567bab9c7560209e150cf312a2d1b3crc32: 530563F6md5: b8b78b6ed93e2a4cdf779cd26ca02358sha1: 2e5e48d5f9bd2f5c4fcd9dc86d7bd0e9637998a6sha256: 89f84ac007de6e8ee235366fb256553df9567bab9c7560209e150cf312a2d1b3sha512: ed2eb281a069e5d77b875dfc344b436c9d223030b42796197855c1ba8d93e0458bb76d40a91d3afe79f8bf44af00ea1582562e001b1e2f9653b76a789de71948ssdeep: 49152:jwBJfNMmsLapb9E8ohhkMt5HVajVOR7I8OYm0nX+s8KuqGaX0ToIBAUZLYfXs:QTyLapxEphkYF6Ym5JBAUZL7type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T149E5C002F7C2C0B1E6173630087B6739EA79DE564F258BD7E360FE795C32390966A14Asha3_384: ae7688e8602c55fb39d97824a0b315d283c27d2d8e928223a9826b3914e74e5c3efab7a064bf7db9da71ddcb07975d36ep_bytes: 558bec6aff68088e6e0068d4f7510064timestamp: 2022-04-20 13:28:13
Version Info:
FileVersion: 3.0.5.1FileDescription: 剪映字幕小助手ProductName: 剪映字幕小助手ProductVersion: 3.0.5.1CompanyName: Ls30LegalCopyright: Ls30 版权所有Comments: 本程序使用易语言编写，使用时可能会报毒，请退出杀毒软件或添加信任后再进行使用。Translation: 0x0804 0x04b0

TrojanSpy6384.1288 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.lx0C
Elastic	malicious (high confidence)
FireEye	Generic.mg.b8b78b6ed93e2a4c
Skyhigh	BehavesLike.Win32.Generic.wc
McAfee	Artemis!B8B78B6ED93E
Cylance	unsafe
Sangfor	Suspicious.Win32.Save.ins
K7AntiVirus	Trojan ( 005246d51 )
K7GW	Trojan ( 005246d51 )
CrowdStrike	win/malicious_confidence_100% (W)
BitDefenderTheta	Gen:NN.ZexaF.36802.ht0@a8wQA1oH
Symantec	ML.Attribute.HighConfidence
tehtris	Generic.Malware
ESET-NOD32	a variant of Win32/Packed.FlyStudio.AA potentially unwanted
APEX	Malicious
ClamAV	Win.Malware.Trojanx-9951053-0
Avast	Win32:TrojanX-gen [Trj]
Sophos	Generic Reputation PUA (PUA)
Trapmine	suspicious.low.ml.score
Ikarus	Trojan.Win32
Google	Detected
Antiy-AVL	RiskWare/Win32.FlyStudio.a
Xcitium	Worm.Win32.Dropper.RA@1qraug
GData	Win32.Trojan.PSE.1KQMTX4
Cynet	Malicious (score: 100)
VBA32	TrojanSpy6384.1288
Malwarebytes	Generic.Malware.AI.DDS
Rising	Trojan.Generic@AI.89 (RDML:r5iUQIjp7hy4Q59TUHjaYQ)
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	Riskware/Application
AVG	Win32:TrojanX-gen [Trj]
DeepInstinct	MALICIOUS