Categories: Trojan

About “Trojan:Win32/Znyonm” infection

The Trojan:Win32/Znyonm is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/Znyonm virus can do?

Performs HTTP requests potentially not found in PCAP.
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid
Attempts to modify proxy settings

How to determine Trojan:Win32/Znyonm?


File Info:
name: 8A21A239455326C1AB96.mlwpath: /opt/CAPEv2/storage/binaries/45b93095da195c6016b79928528bd390054d54cab2e1072594c57c14f1fa4a12crc32: 72AB33CEmd5: 8a21a239455326c1ab9644cc2343ccf2sha1: 37380be076b8a1a9e6a3fdfcd803de14b48d045bsha256: 45b93095da195c6016b79928528bd390054d54cab2e1072594c57c14f1fa4a12sha512: 6a328820eeaf0a87d798d963a2ecd6eb40ab89f904155f4de9ce299f9797435f0df31830aab666500ce55f717c25b801c2b6d2762d3ad7bc78351f45ea0a9235ssdeep: 24576:JSggnQ2RdoOVXK7yqHsy1ZnWLCDeX9w1dEKdE:J6XK11ZW+yX9w11Etype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1F6557D23F142C0B2C915677025B65B3AAA799F620A358A83E3F4FDB46D33172D72711Dsha3_384: c4dc8b447c8143de4be50cde717a34f7474ae24905853fa98cf63da4c016226f2dae45baa3f365c54651b0d9ecf01843ep_bytes: 558bec6aff6850ef500068cca44c0064timestamp: 2023-11-23 15:40:08
Version Info:
FileVersion: 1.0.0.0FileDescription: 天下IE强制QQ登录同步器ProductName: 天下IE强制QQ登录同步器ProductVersion: 1.0.0.0CompanyName: 天下LegalCopyright: 天下 版权所有Comments: 天下IE强制QQ登录同步器Translation: 0x0804 0x04b0

Trojan:Win32/Znyonm also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.lwTx
tehtris	Generic.Malware
FireEye	Generic.mg.8a21a239455326c1
CAT-QuickHeal	Risktool.Flystudio.16884
Skyhigh	BehavesLike.Win32.Generic.th
Cylance	unsafe
Sangfor	Suspicious.Win32.Save.ins
K7AntiVirus	Trojan ( 005246d51 )
K7GW	Trojan ( 005246d51 )
Cybereason	malicious.076b8a
BitDefenderTheta	Gen:NN.ZexaF.36608.pr0@auKtYnmb
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/FlyStudio.HackTool.C potentially unwanted
Cynet	Malicious (score: 100)
APEX	Malicious
Avast	Win32:TrojanX-gen [Trj]
Sophos	Mal/Generic-S
F-Secure	Trojan.TR/Spy.Gen
Trapmine	malicious.moderate.ml.score
SentinelOne	Static AI – Malicious PE
Varist	W32/OnlineGames.HG.gen!Eldorado
Avira	TR/Spy.Gen
Antiy-AVL	Trojan/Win32.FlyStudio.a
Xcitium	TrojWare.Win32.Agent.OSCF@5rs7jr
Microsoft	Trojan:Win32/Znyonm
GData	Win32.Trojan.PSE.15MID6N
Google	Detected
McAfee	Artemis!8A21A2394553
VBA32	BScope.Trojan.Wacatac
Malwarebytes	Generic.Malware.AI.DDS
TrendMicro-HouseCall	TROJ_GEN.R011H0CKP23
Rising	Trojan.Generic@AI.99 (RDML:1aOsH4yz+MijwTE5jyZXRA)
Ikarus	Trojan.Win32.Agent
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/CoinMiner.ELG!tr.pws
AVG	Win32:TrojanX-gen [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_90% (W)