Trojan:Win32/Znyonm malicious file

The Trojan:Win32/Znyonm is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/Znyonm virus can do?

Sample contains Overlay data
Authenticode signature is invalid
CAPE detected the AgentTeslaV2 malware family

How to determine Trojan:Win32/Znyonm?


File Info:
name: 46944824C5FE319E706B.mlw
path: /opt/CAPEv2/storage/binaries/d14f23225e043fadaf9b2a2d9d1f34e2ae828f207d0d00973e7dacbbce9e7be9
crc32: 4420335B
md5: 46944824c5fe319e706be644bc5f8488
sha1: 63928f16e4e650d6f9a925a6d283d074dd00fe75
sha256: d14f23225e043fadaf9b2a2d9d1f34e2ae828f207d0d00973e7dacbbce9e7be9
sha512: abbc39b89b065036fcb17c06f9e0bd4bb3dbfcfa7a9835c9819546b783a20192a92180f78aa36425359a98699a066515bf7f3290abe48dd10c4882e1a429ab97
ssdeep: 3072:ECO9yMsUkMMqh2Wm+ZIR3NCKCC15A4Ivp7W/14:DO9yMsUkMMqh2MKR3NCmLIVWN
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1C9440E037E88EB11E5A87E3792EF6C2413B2B0C71633C60BAF499F9514516926C7E72D
sha3_384: c2e72589741b2417788c8b8051f5ab681efc878d86cea5e4a026e2699cadf20ca30803a2c5b3d8628a24ac76d6924df8
ep_bytes: 6d0a20031d051d051d051d050a000212
timestamp: 2023-11-27 16:05:55

Version Info:
0: [No Data]

Trojan:Win32/Znyonm also known as:

Bkav	W32.AIDetectMalware.CS
Lionic	Trojan.MSIL.Agent.mCUj
FireEye	Generic.mg.46944824c5fe319e
Skyhigh	BehavesLike.Win32.Generic.dt
Malwarebytes	Generic.Malware/Suspicious
Sangfor	Trojan.Win32.Agent.V141
K7AntiVirus	Riskware ( 00584baa1 )
K7GW	Riskware ( 00584baa1 )
Cybereason	malicious.6e4e65
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
APEX	Malicious
ClamAV	Win.Packed.Msilperseus-9956591-0
Trapmine	malicious.moderate.ml.score
Ikarus	Trojan-Spy.MSIL.AgentTesla
Varist	W32/Agent.EMA.gen!Eldorado
Kingsoft	Win32.Troj.Agent.cks
Microsoft	Trojan:Win32/Znyonm
GData	Win32.Trojan.Agent.DD9H1K
Google	Detected
McAfee	Artemis!46944824C5FE
Cylance	unsafe
Rising	Trojan.AntiVM!1.CF63 (CLASSIC)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (D)

How to remove Trojan:Win32/Znyonm?

Trojan:Win32/Znyonm removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X