Trojan:Win32/Bewymids.A malicious file

The Trojan:Win32/Bewymids.A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/Bewymids.A virus can do?

Sample contains Overlay data
Presents an Authenticode digital signature
Reads data out of its own binary image
Authenticode signature is invalid
Attempts to disable browser security warnings

How to determine Trojan:Win32/Bewymids.A?


File Info:
name: 57F1B539394B8FC6A806.mlw
path: /opt/CAPEv2/storage/binaries/5a6eea8dc6a28badc678d0969138bb0b33664eb8aba7961d11c2bc9cca4d9e94
crc32: C23C05BC
md5: 57f1b539394b8fc6a80659276028862d
sha1: d8b7f55491aaeba0f101eb960bf9b6e327c5fbae
sha256: 5a6eea8dc6a28badc678d0969138bb0b33664eb8aba7961d11c2bc9cca4d9e94
sha512: aea941c15e0b5eff832b9579485a8f7b062b2310061a6a06277d98e6380d95a6ae0489f62f2ccbbaa7c1f42f41b23bd6212151ca8991e008ae291951f6cf9ab8
ssdeep: 768:763w154RNoWgYf4jgK79fQK0pvQ4eQz0XcTNTfmSMtFUVELg/L0TDvHYyu:763uANbtM7WpvOXmNaztvIY/v/u
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T106638D6ABAD940A3CC8744B05678CE577F3E63730E6451938F54AA461DE27D0CF3A227
sha3_384: 8843ab882364827ace0ad91c1fb5d768b94078229c61ff38a333bc2c8afceaeaedb0eb8493380af0f39da260f20aeb20
ep_bytes: 558bec6aff68b0a1400068e05b400064
timestamp: 2010-01-25 08:08:47

Version Info:
0: [No Data]

Trojan:Win32/Bewymids.A also known as:

Elastic	malicious (high confidence)
DrWeb	Trojan.DownLoader5.45915
MicroWorld-eScan	Gen:Variant.Zusy.434027
FireEye	Generic.mg.57f1b539394b8fc6
McAfee	Downloader-CGW
Cylance	Unsafe
Zillya	Trojan.Bewymids.Win32.7
K7AntiVirus	Trojan ( 0015f1031 )
K7GW	Trojan ( 0015f1031 )
Cybereason	malicious.491aae
VirIT	Trojan.Win32.Generic.BMNL
Symantec	Downloader
ESET-NOD32	a variant of Win32/Bewymids.A
APEX	Malicious
Kaspersky	HEUR:Backdoor.Win32.Bewymids.gen
BitDefender	Gen:Variant.Zusy.434027
NANO-Antivirus	Trojan.Win32.Bewymids.dxcmgj
Avast	Win32:Agent-AUOQ [Spy]
Tencent	Malware.Win32.Gencirc.1201b47b
Ad-Aware	Gen:Variant.Zusy.434027
Emsisoft	Gen:Variant.Zusy.434027 (B)
VIPRE	Gen:Variant.Zusy.434027
McAfee-GW-Edition	BehavesLike.Win32.PWSZbot.km
Ikarus	Trojan.Win32.Bewymids
GData	Gen:Variant.Zusy.434027
Jiangmin	Backdoor.Bewymids.a
Google	Detected
Avira	TR/Bewymids.yqazi
MAX	malware (ai score=87)
Antiy-AVL	Trojan/Generic.ASMalwS.5E
Arcabit	Trojan.Zusy.D69F6B
Microsoft	Trojan:Win32/Bewymids.A
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Bewymids.C229973
ALYac	Gen:Variant.Zusy.434027
VBA32	Trojan.Genome.nr
Malwarebytes	Malware.AI.3464081818
Rising	Trojan.Generic@AI.79 (RDMK:cmRtazrfw0bTj7prCuycSD939F/e)
Yandex	Trojan.GenAsa!ZzrVOsKEPjU
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.300983.susgen
AVG	Win32:Agent-AUOQ [Spy]
Panda	Generic Malware
CrowdStrike	win/malicious_confidence_70% (D)

How to remove Trojan:Win32/Bewymids.A?

Trojan:Win32/Bewymids.A removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X