About "Trojan:Win32/Wacatac.D!ml" infection

The Trojan:Win32/Wacatac.D!ml is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/Wacatac.D!ml virus can do?

Executable code extraction
Creates RWX memory
HTTP traffic contains suspicious features which may be indicative of malware related traffic
Performs some HTTP requests
Unconventionial language used in binary resources: Sindhi
The binary likely contains encrypted or compressed data.
Attempts to modify proxy settings
Collects information to fingerprint the system

Related domains:

z.whorecord.xyz

a.tomx.xyz

nsabeau.com.my

How to determine Trojan:Win32/Wacatac.D!ml?


File Info:
crc32: 1B5BAF61
md5: a2bad9119da374d3df08f296d8960949
name: upd.exe
sha1: b5c5230cbdb9e1f8c4c9bb34f1e66e15c6f79f71
sha256: 1ef8a374b6b9f4eeb7e080dbb0da7d000613a60fce39ae25d3a3ccedb7277245
sha512: 12f927a3921eae5660b5fba391a73bfec7ecd86707263026f845fd564bf84923df99e1d35d960e232c8802e068b5409bd4f9dd315f0c714285a9842614c85eb1
ssdeep: 6144:SjfJy7rYxOWZ8q++MtWHWL0Xofmq+e1BZl+:MhyvYxOW2q++kWHNyJc
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Trojan:Win32/Wacatac.D!ml also known as:

FireEye	Generic.mg.a2bad9119da374d3
Cylance	Unsafe
Sangfor	Malware
Cybereason	malicious.cbdb9e
BitDefenderTheta	Gen:NN.ZexaF.34082.puW@ay0Ro5lG
Symantec	Packed.Generic.528
Rising	Malware.Heuristic!ET#87% (RDMK:cmRtazqatoQgBLfPopW/MDqfXsVF)
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.AdwareBProtect.dh
Trapmine	malicious.high.ml.score
Endgame	malicious (high confidence)
Microsoft	Trojan:Win32/Wacatac.D!ml
Acronis	suspicious
VBA32	BScope.Trojan.Gandcrab
APEX	Malicious
SentinelOne	DFI – Malicious PE
eGambit	Unsafe.AI_Score_100%
CrowdStrike	win/malicious_confidence_100% (D)
Qihoo-360	HEUR/QVM10.1.9125.Malware.Gen

How to remove Trojan:Win32/Wacatac.D!ml?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About “Trojan:Win32/Wacatac.D!ml” infection