Categories: Trojan

Trojan:Win32/Znyonm malicious file

The Trojan:Win32/Znyonm is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/Znyonm virus can do?

The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Authenticode signature is invalid
Yara detections observed in process dumps, payloads or dropped files

How to determine Trojan:Win32/Znyonm?


File Info:
name: 752EA2C2FDC34DE9CD8E.mlwpath: /opt/CAPEv2/storage/binaries/fd03ea32f520aa57ee6b4e29eedf1c897857f9368933c2bb3367d2016dc27454crc32: 3BA490E6md5: 752ea2c2fdc34de9cd8e50b0e35df912sha1: a4a17fa6922d833f12ad2530a8431cac88b7ae81sha256: fd03ea32f520aa57ee6b4e29eedf1c897857f9368933c2bb3367d2016dc27454sha512: 69e43fe185c34c9785155a115405f8d54580fccae8146c3272559e6896a1f7eda46384a684ded092109975ce5066c495e6495f7b418463390c2a735bbb50fb14ssdeep: 24576:IcLWn6QUUK3k4ntAL/IDpgpJKHj9UAdOj8XyBzfDWEnGARtby0Bpmz:IcL003lkI1gpJKHBUScR3JyEpotype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1E945331BA233B337FBC6C733967E15D0F1C948D9A1D07AAA584446AB8966F703570C8Dsha3_384: 858f9fa80935d2fdff198b5d620e436c4d0ed4132e1940b1167a3d522a35864fea4e0dc0ca4272953cd9933bebbe8ecaep_bytes: 60be154065008dbeebcfdaff5783cdfftimestamp: 1970-01-01 00:00:00
Version Info:
0: [No Data]

Trojan:Win32/Znyonm also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Agent.Y!c
Elastic	malicious (moderate confidence)
MicroWorld-eScan	Gen:Variant.Lazy.407549
FireEye	Gen:Variant.Lazy.407549
Skyhigh	BehavesLike.Win32.Generic.tc
McAfee	Artemis!752EA2C2FDC3
Cylance	unsafe
Zillya	Trojan.Agent.Win32.3734481
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Riskware ( 0040eff71 )
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.6922d8
Arcabit	Trojan.Lazy.D637FD
VirIT	Trojan.Win32.GenusB.DSXH
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Generik.GDSELAW
Cynet	Malicious (score: 100)
APEX	Malicious
Kaspersky	Trojan-Proxy.Win32.Agent.yot
BitDefender	Gen:Variant.Lazy.407549
NANO-Antivirus	Trojan.Win32.LPTpBW.kcajan
Avast	Win32:Malware-gen
Tencent	Win32.Trojan.Malware.Szfl
Sophos	Mal/Generic-S
F-Secure	Trojan.TR/Crypt.XPACK.Gen
VIPRE	Gen:Variant.Lazy.407549
TrendMicro	TROJ_GEN.R002C0XIG23
Trapmine	malicious.high.ml.score
Emsisoft	Gen:Variant.Lazy.407549 (B)
Ikarus	Trojan.Crypt
Jiangmin	TrojanProxy.Agent.edf
Webroot	W32.Malware.Gen
Varist	W32/ABTrojan.OODS-7484
Avira	TR/Crypt.XPACK.Gen
Antiy-AVL	GrayWare/Win32.Kryptik.ffp
Kingsoft	Win32.Troj.Undef.a
Microsoft	Trojan:Win32/Znyonm
ViRobot	Trojan.Win.Z.Agent.1207296
ZoneAlarm	Trojan-Proxy.Win32.Agent.yot
GData	Gen:Variant.Lazy.407549
Google	Detected
AhnLab-V3	Trojan/Win.Generic.C5504891
BitDefenderTheta	Gen:NN.ZexaF.36744.jnGfaKZIuAe
ALYac	Gen:Variant.Lazy.407549
MAX	malware (ai score=81)
VBA32	BScope.Trojan.Win64.Agent
Malwarebytes	Trojan.Dropper.GO
Panda	Trj/Chgt.AD
TrendMicro-HouseCall	TROJ_GEN.R002C0XIG23
Rising	Backdoor.Agent!1.EBB6 (CLASSIC)
Yandex	Trojan.PR.Agent!nvMlcl3w7NM
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.219025662.susgen
Fortinet	W32/PossibleThreat
AVG	Win32:Malware-gen
CrowdStrike	win/malicious_confidence_100% (W)