About “Trojan:Win32/Tiggre!bit” infection

The Trojan:Win32/Tiggre!bit is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/Tiggre!bit virus can do?

CAPE extracted potentially suspicious content
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous .NET characteristics

How to determine Trojan:Win32/Tiggre!bit?


File Info:
name: A096F1E66480B3247320.mlw
path: /opt/CAPEv2/storage/binaries/12629a710a4143f9ef9e34cb3c68d431b204a70974ba9f7e75ac761f3f2f3286
crc32: CACC0933
md5: a096f1e66480b32473209b22a84594c2
sha1: effda9b57f25cee4d6e647c222de14702fcee427
sha256: 12629a710a4143f9ef9e34cb3c68d431b204a70974ba9f7e75ac761f3f2f3286
sha512: 9b1a4aa3b292148e30d3cde27ac1a5cdae96288b830c9c08f08752759957f2b9b195e2ab93c7e1d7d1704409dad2afaefed02828c95f0cde9e79d2b9a6600b8e
ssdeep: 1536:tjLcC46HZJzo3EDCUanxjH0AQgR9kdutjt2zii0xgnxtFkRlgl+FpQ:t8CPH72EDCUejFSut2ui0axtUlg7
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T108B3C60776888711D96878B1C0EF693403E5BECB2772E6A63F4C77890D023E79D96A4D
sha3_384: 0f9295a12ff454b7944e00caedff6c93b5c55173551b9c8f5dd8670aaa349795b66194f4afa4a46253b7c8e3307a148d
ep_bytes: ff250020400000000000000000000000
timestamp: 2019-02-07 05:43:53

Version Info:
Translation: 0x0000 0x04b0
Comments: NdSwWYEkQgHMZCo
CompanyName: bYCQnKcEHPrXCFi
FileDescription: RdSwQAFsRaJTEWz
FileVersion: 5.6.5.7
InternalName: 1.exe
LegalCopyright: aMLMkSbXQCRcoZZ
OriginalFilename: 1.exe
ProductName: xBLQRnSbFDKkWyX
ProductVersion: 5.6.5.7
Assembly Version: 0.0.0.0

Trojan:Win32/Tiggre!bit also known as:

Bkav	W32.AIDetectMalware.CS
tehtris	Generic.Malware
MicroWorld-eScan	Trojan.GenericKD.31669867
Skyhigh	Generic.bvd
McAfee	Generic.bvd
Malwarebytes	Generic.Malware/Suspicious
VIPRE	Trojan.GenericKD.31669867
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Riskware ( 0040eff71 )
Alibaba	Trojan:MSIL/Tiggre.8c7f956a
K7GW	Riskware ( 0040eff71 )
CrowdStrike	win/malicious_confidence_100% (W)
VirIT	Trojan.Win32.MSIL.BJJ
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	MSIL/TrojanDownloader.Small.BWP
APEX	Malicious
Kaspersky	Trojan.Win32.Agentb.jkdk
BitDefender	Trojan.GenericKD.31669867
NANO-Antivirus	Trojan.Win32.Small.fmslbp
Avast	Win32:Malware-gen
Tencent	Win32.Trojan.Agentb.Ijgl
Emsisoft	Trojan.GenericKD.31669867 (B)
F-Secure	Trojan.TR/Dldr.Small.xiiak
DrWeb	Trojan.Siggen5.53778
Zillya	Trojan.Agentb.Win32.21579
FireEye	Generic.mg.a096f1e66480b324
Sophos	Mal/Generic-R
SentinelOne	Static AI – Malicious PE
MAX	malware (ai score=100)
Google	Detected
Avira	TR/Dldr.Small.xiiak
Varist	W32/Small.OPDO-4539
Antiy-AVL	Trojan/Win32.Agentb
Kingsoft	malware.kb.c.996
Microsoft	Trojan:Win32/Tiggre!bit
Xcitium	Malware@#1nd7mgcraahjp
Arcabit	Trojan.Generic.D1E33E6B
ZoneAlarm	Trojan.Win32.Agentb.jkdk
GData	Win32.Trojan.Agent.8BHDKM
AhnLab-V3	Malware/Gen.Generic.C3008157
BitDefenderTheta	Gen:NN.ZemsilF.36802.gq0@aKeRfpn
ALYac	Trojan.GenericKD.31669867
VBA32	TScope.Trojan.MSIL
Cylance	unsafe
Panda	Trj/WLT.E
Zoner	Trojan.Win32.76666
Rising	Backdoor.SpyGate!8.E154 (KTSE)
Ikarus	Trojan-Downloader.MSIL.Small
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/SpyGate.P!tr.bdr
AVG	Win32:Malware-gen
DeepInstinct	MALICIOUS
alibabacloud	Trojan[downloader]:MSIL/Agentb.jkdk

How to remove Trojan:Win32/Tiggre!bit?

Trojan:Win32/Tiggre!bit removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X