Trojan

Trojan:Win32/Sisron information

Malware Removal

The Trojan:Win32/Sisron is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:Win32/Sisron virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Unconventionial language used in binary resources: Portuguese (Brazilian)
  • The binary likely contains encrypted or compressed data.
  • Installs itself for autorun at Windows startup
  • Creates a copy of itself
  • Makes SMTP requests, possibly sending spam or exfiltrating data.

Related domains:

smtps.uol.com.br

How to determine Trojan:Win32/Sisron?


File Info:

crc32: D69E5FC1
md5: ea1009efe5c75b2a559396a8dd8d6c08
name: EA1009EFE5C75B2A559396A8DD8D6C08.mlw
sha1: 67a74c60571cf03fb656aa507224dd7fb2df45d0
sha256: d0eddda5663903859c9a6baba5a33bb2430bf54d6edb3a0a76500c2c7677d022
sha512: bbd2765edf9e3d7e9634d290aa4bd0c3ac9cd148c8379b2911de114a4820b591cbf88441c53090b3d9be83e153dd79bae82543d67351c76a842b84eb1503fda2
ssdeep: 12288:w1ObH8icj1qr/ZYnzJCzq0P1nAJ+ubaQh9bwZHTGwj+NY9lL5uA+KviXy3BYXoh:rbH8NcZFOAhDu8HTGn6JuwBp4j
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan:Win32/Sisron also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Kazy.34223
FireEyeGeneric.mg.ea1009efe5c75b2a
CAT-QuickHealTrojan.Generic
McAfeeGenDownloader.il
CylanceUnsafe
VIPRETrojan.Win32.Packer.NTkrnl0.1 (ep)
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan-Downloader ( 002e302e1 )
BitDefenderGen:Variant.Kazy.34223
K7GWTrojan-Downloader ( 002e302e1 )
CrowdStrikewin/malicious_confidence_100% (W)
CyrenW32/SuspPack.G.gen!Eldorado
SymantecDownloader
TotalDefenseWin32/SillyDl.PVN!packed
APEXMalicious
AvastWin32:GenMalicious-KPO [Trj]
ClamAVWin.Keylogger.Deepscan-9773237-0
KasperskyHEUR:Trojan.Win32.Generic
AlibabaTrojanSpy:Win32/Banker.4ed0faa7
NANO-AntivirusTrojan.Win32.Crypted.kmxkd
AegisLabTrojan.Win32.Generic.4!c
RisingStealer.Banker!1.64D3 (CLOUD)
Ad-AwareGen:Variant.Kazy.34223
EmsisoftGen:Variant.Kazy.34223 (B)
ComodoTrojWare.Win32.PSW.Ldpinch.~NNT@1op6ij
F-SecureTrojan-Spy:W32/Banker.JGT
ZillyaTrojan.Banker.Win32.55886
TrendMicroTROJ_GEN.R002C0OAI21
McAfee-GW-EditionGenDownloader.il
SophosML/PE-A + Mal/Banker-Z
IkarusTrojan-Downloader.Win32.Homa
WebrootW32.Trojan.Gen
AviraTR/Crypt.XPACK.Gen
MAXmalware (ai score=81)
MicrosoftTrojan:Win32/Sisron
GridinsoftTrojan.Win32.Downloader.oa
ArcabitTrojan.Kazy.D85AF
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataGen:Variant.Kazy.34223
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Banker.R4029
Acronissuspicious
BitDefenderThetaAI:Packer.661A0C781F
ALYacGen:Variant.Kazy.34223
VBA32TScope.Malware-Cryptor.SB
MalwarebytesTrojan.Agent
PandaGeneric Malware
ESET-NOD32a variant of Win32/Spy.Banker.SMU
TrendMicro-HouseCallTROJ_GEN.R002C0OAI21
TencentWin32.Hacktool.Morphinet.Ajky
YandexPacked/NTkrnl
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.121218.susgen
FortinetW32/FakeAV.FE!tr
AVGWin32:GenMalicious-KPO [Trj]
Cybereasonmalicious.fe5c75
Paloaltogeneric.ml
Qihoo-360HEUR/Malware.QVM19.Gen

How to remove Trojan:Win32/Sisron?

Trojan:Win32/Sisron removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment