Trojan:Win32/Occamy.C04 (file analysis)

The Trojan:Win32/Occamy.C04 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/Occamy.C04 virus can do?

• Executable code extraction
• Creates RWX memory
• Unconventionial language used in binary resources: Spanish (Modern)
• The binary likely contains encrypted or compressed data.
• Network activity detected but not expressed in API logs
• Anomalous binary characteristics

How to determine Trojan:Win32/Occamy.C04?

File Info:
crc32: AF9ED142
md5: 61a6195b0a8f58f201418ecfc1268a30
name: 61A6195B0A8F58F201418ECFC1268A30.mlw
sha1: 7c6ed1ad2f1b20b86c67cc7aa4f2e298f2aae7dc
sha256: 04f6d09867fb11c4ce3044cb8244a3258b9f11b5a974b3f76875d571b683d383
sha512: 4c2673c59254a081138c489afdf08d8201f6f8d7313ac86ddd93b323bff37c5694f8c31367ebbde40d0a03e8e72321c6fcdb8d452d7e4a6e3af4503c8f9a9bcb
ssdeep: 24576:QkeXOf0MjcIfsXE4po4YPMO2oMiCepPfd9cvUXN973b:8O8Mjzfs04po4A21gPfcsX3b
type: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows

Version Info:
Translation: 0x0c0a 0x04b0
LegalCopyright: @M.LLOP Software
InternalName: radi5
FileVersion: 4.01.0001
CompanyName: M.LLOP
LegalTrademarks: Radionic Soft System
ProductName: Radionic Soft System 5
ProductVersion: 4.01.0001
FileDescription: Aplicacixf3n Windows32
OriginalFilename: radi5.exe

Trojan:Win32/Occamy.C04 also known as:

How to remove Trojan:Win32/Occamy.C04?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.