Trojan:Win32/Hancitor.SS!MTB malicious file

The Trojan:Win32/Hancitor.SS!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/Hancitor.SS!MTB virus can do?

Executable code extraction
Creates RWX memory
Network activity detected but not expressed in API logs

How to determine Trojan:Win32/Hancitor.SS!MTB?


File Info:
crc32: 8B0A75FD
md5: c8fd06b6a005bf8e1639e35fbf9dd591
name: C8FD06B6A005BF8E1639E35FBF9DD591.mlw
sha1: 98d38f45d335e4f1cf181b7e6230b19d957f8d20
sha256: d9fe9cd2651c396a66eeba4c4e39534ccd1d970c40e20d3707437cde072e576f
sha512: d05827652ed1e05fe60ec2114b3fc573866c5b0c0e5f0021f688ea4672ac3e4c904e4815b97f420a785be2217c10262e51a66eda13036dd103be6d58d2417e2b
ssdeep: 6144:CbuKPXA0BepvkjXBpHTboCEAtgBgqtkrkHGRCH:M+pMrBpHwCEAtNtoH2C
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Copyright xa9 Track single 1994-2012
FileVersion: 5.7.6.954
CompanyName: Track single
ProductName: Remember make Springnine
ProductVersion: 5.7.6.954
FileDescription: Remember make
OriginalFilename: Will.dll
Translation: 0x0409 0x04e4

Trojan:Win32/Hancitor.SS!MTB also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.36331002
McAfee	RDN/Hancitor
Sangfor	Trojan.Win32.Hancitor.SS
BitDefender	Trojan.GenericKD.36331002
K7GW	Trojan ( 00577b751 )
K7AntiVirus	Trojan ( 00577b751 )
Symantec	Trojan.Gen.MBT
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan.Win32.Agent.xagknk
Alibaba	Trojan:Win32/Hancitor.ec6377d2
Rising	Trojan.Hancitor!8.B197 (CLOUD)
Ad-Aware	Trojan.GenericKD.36331002
Sophos	Mal/Generic-S
F-Secure	Malware.VBS/Dldr.Chanitor.rrfdc
DrWeb	Trojan.Chanitor.59
TrendMicro	TROJ_FRS.0NA103BC21
McAfee-GW-Edition	RDN/Hancitor
FireEye	Trojan.GenericKD.36331002
Emsisoft	Trojan.GenericKD.36331002 (B)
Ikarus	Trojan.SuspectCRC
Avira	VBS/Dldr.Chanitor.rrfdc
MAX	malware (ai score=85)
Kingsoft	Win32.Troj.Generic_a.a.(kcloud)
Microsoft	Trojan:Win32/Hancitor.SS!MTB
Gridinsoft	Trojan.Win32.Chanitor.oa
Arcabit	Trojan.Generic.D22A5DFA
ZoneAlarm	Trojan.Win32.Agent.xagknk
GData	Trojan.GenericKD.36331002
Cynet	Malicious (score: 90)
AhnLab-V3	Malware/Win32.Generic.C4333800
ALYac	Trojan.GenericKD.36331002
Malwarebytes	Trojan.Chanitor
Panda	Trj/GdSda.A
ESET-NOD32	a variant of Generik.IFFXVZJ
TrendMicro-HouseCall	TROJ_FRS.0NA103BC21
Tencent	Win32.Trojan.Agent.Tccj
Fortinet	W32/Generik.IFFXVZJ!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove Trojan:Win32/Hancitor.SS!MTB?

Trojan:Win32/Hancitor.SS!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X