Trojan

Trojan:Win32/Ymacco.AB1D (file analysis)

Malware Removal

The Trojan:Win32/Ymacco.AB1D is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware - Review 2020

GridinSoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend to use GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the TRIAL period.
6-day free trial available.

What Trojan:Win32/Ymacco.AB1D virus can do?

  • Attempts to connect to a dead IP:Port (2 unique times)
  • Reads data out of its own binary image
  • HTTP traffic contains suspicious features which may be indicative of malware related traffic
  • Performs some HTTP requests
  • The binary likely contains encrypted or compressed data.
  • Anomalous binary characteristics

Related domains:

www.cheathappens.com
apps.identrust.com
crl.identrust.com

How to determine Trojan:Win32/Ymacco.AB1D?


File Info:

crc32: FBA2C86A
md5: 3969cfeccf1367184a1a981962040969
name: 3969CFECCF1367184A1A981962040969.mlw
sha1: 102ca25617ca4c41c40193fc6ac4d28459afdb93
sha256: 1d6e7432cdf59ddfd8a9cbdd744913680ccac5fff1a151e2e74a76a0a17604da
sha512: bae9eb48076c02c96112939b6268b384cf257db2bdd45713eb593f4c6c5b17147363225ce1674e527164f91862eadcc7ad423a41f9de31d88f87e951648d0ce4
ssdeep: 49152:uE0TcQ4h7m7MidjO6HdcTjKexxaawJBV1Ls2wBxJBV1Ls2wB5:uEthsjcnvv5a5
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Trojan:Win32/Ymacco.AB1D also known as:

BkavW32.AIDetect.malware2
Elasticmalicious (high confidence)
ClamAVWin.Tool.Gamehack-6735688-0
CAT-QuickHealTrojan.IGENERICPMF.S1211246
ZillyaTrojan.GameHack.Win64.19
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
K7GWUnwanted-Program ( 004c2cea1 )
K7AntiVirusUnwanted-Program ( 004c2cea1 )
CyrenW32/S-a7832c08!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/GameHack.EVN potentially unsafe
APEXMalicious
CynetMalicious (score: 100)
NANO-AntivirusTrojan.Win32.GameHuck.faxjnv
TencentMalware.Win32.Gencirc.10c8df6b
BitDefenderThetaGen:NN.ZexaF.34266.UvX@au5nAVai
FireEyeGeneric.mg.3969cfeccf136718
EmsisoftApplication.GameHack (A)
SentinelOneStatic AI – Malicious PE
JiangminHackTool.GameHuck.ge
eGambitUnsafe.AI_Score_100%
Antiy-AVLTrojan/Generic.ASMalwS.2517696
MicrosoftTrojan:Win32/Ymacco.AB1D
SUPERAntiSpywareHack.Tool/Gen-GameHack
GDataWin32.Application.PSE.11423CR
TACHYONTrojan/W32.GameHuck.1813184
AhnLab-V3PUP/Win32.Helper.R240933
McAfeeGenericRXAA-AA!3969CFECCF13
VBA32Trojan.Downloader
MalwarebytesMalware.AI.2167534142
PandaTrj/GdSda.A
TrendMicro-HouseCallTROJ_GEN.R002H0CKD21
RisingPUF.GameHack!1.B348 (CLASSIC)
YandexTrojan.GenAsa!bJnf0WOlY7w
IkarusTrojan.Win32.Occamy
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/GameHack.A7832C08!tr
Paloaltogeneric.ml

How to remove Trojan:Win32/Ymacco.AB1D?

Trojan:Win32/Ymacco.AB1D removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment