Categories: SpyTrojan

TrojanSpy:Win32/Keylogger.EO malicious file

The TrojanSpy:Win32/Keylogger.EO is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanSpy:Win32/Keylogger.EO virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
CAPE detected the embedded win api malware family
Yara detections observed in process dumps, payloads or dropped files

How to determine TrojanSpy:Win32/Keylogger.EO?


File Info:
name: D208C09863BDE4E7DAE5.mlwpath: /opt/CAPEv2/storage/binaries/45b01ff73ecf378e58f6bdc472cd2b77be6cacd4818f429df913edbe0e5c2384crc32: A978222Bmd5: d208c09863bde4e7dae509a4ad4cb320sha1: 575ba11fdb76f2245f3d6bc82f98e807f34e9ab6sha256: 45b01ff73ecf378e58f6bdc472cd2b77be6cacd4818f429df913edbe0e5c2384sha512: 4582fcdb7801ce78cec26a5446efcf1ced8c956a6d74880661f024584756e9a5cb85e0d77e2e0a54bccd6a90a97d8dea12a2d5158c318b96fc589af01321028dssdeep: 1536:jpqFQnVOw66Txr2Lx0cMcl7ZQejq0QnqUyDDkgJYIkgX4/i+VwFuSsg:EQV71A0/cl7y6KqXPk6Y9E49w8Ssgtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T144B36B47B6D08C72C4608BBC5C26E360F77FBA702D664727ABA54ADD8C252C25C9C35Bsha3_384: f3bdf5d838aca91a5f5a7b600f11ee07b2ada85c0df663e7f73109395bc245fb4201578bf39746f9531a13d11ee33764ep_bytes: 558becb9050000006a006a004975f953timestamp: 1992-06-19 22:22:17
Version Info:
0: [No Data]

TrojanSpy:Win32/Keylogger.EO also known as:

Bkav	W32.AIDetectMalware
tehtris	Generic.Malware
MicroWorld-eScan	Trojan.PWS.Agent.SDL
Skyhigh	BehavesLike.Win32.Picsys.ch
McAfee	GenericRXAA-AA!D208C09863BD
Malwarebytes	Malware.AI.4137571293
Zillya	Trojan.Keylogger.Win32.80482
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 0055e3df1 )
Alibaba	TrojanSpy:Win32/KeyLogger.230455c7
K7GW	Trojan ( 0055e3df1 )
CrowdStrike	win/malicious_confidence_100% (W)
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	Win32/TrojanDropper.Delf.NHU
APEX	Malicious
ClamAV	Win.Keylogger.Generic-7100802-0
Kaspersky	Trojan-Spy.Win32.KeyLogger.ng
BitDefender	Trojan.PWS.Agent.SDL
NANO-Antivirus	Trojan.Win32.KeyLogger.dxjvti
Avast	Win32:KeyLogger-IC [Trj]
Rising	Trojan.Spy.Win32.KeyLogger.ng (CLASSIC)
Emsisoft	Trojan.PWS.Agent.SDL (B)
Google	Detected
F-Secure	Dropper.DR/Delphi.Gen
DrWeb	Trojan.KeyLogger.25103
VIPRE	Trojan.PWS.Agent.SDL
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.d208c09863bde4e7
Sophos	Mal/Generic-S
SentinelOne	Static AI – Malicious PE
Jiangmin	TrojanSpy.Keylogger.ek
Varist	W32/Trojan.MPWX-0230
Avira	DR/Delphi.Gen
MAX	malware (ai score=100)
Antiy-AVL	Trojan[Spy]/Win32.KeyLogger
Kingsoft	malware.kb.a.1000
Microsoft	TrojanSpy:Win32/Keylogger.EO
Xcitium	TrojWare.Win32.TrojanSpy.KeyLogger.~WA@fphl
Arcabit	Trojan.PWS.Agent.SDL
ViRobot	Trojan.Win32.KeyLogger.109568
ZoneAlarm	Trojan-Spy.Win32.KeyLogger.ng
GData	Trojan.PWS.Agent.SDL
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Keylogger.R22502
VBA32	Trojan.KeyLogger.m
ALYac	Trojan.PWS.Agent.SDL
Cylance	unsafe
Panda	Trj/Keylog.MX
Tencent	Malware.Win32.Gencirc.10b2fbbb
Yandex	Trojan.GenAsa!4VhdMwmtS6A
Ikarus	Virus.Win32.Tufik
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/KeyLogger.JL!tr
BitDefenderTheta	AI:Packer.9FE6B6B71E
AVG	Win32:KeyLogger-IC [Trj]
DeepInstinct	MALICIOUS
alibabacloud	Trojan[dropper]:Win/Delf.NHU