UDS:Trojan-Banker.Win32.Bandra.bdf (file analysis)

The UDS:Trojan-Banker.Win32.Bandra.bdf is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What UDS:Trojan-Banker.Win32.Bandra.bdf virus can do?

The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine UDS:Trojan-Banker.Win32.Bandra.bdf?


File Info:
name: 68DECF85733DA4EAFB0C.mlw
path: /opt/CAPEv2/storage/binaries/4cddd78dcf498bdd1b694e6fdd96df033c170deb6b5514361f9b562a405bdce2
crc32: CDBDAA3D
md5: 68decf85733da4eafb0cce3a88af3515
sha1: d6aef5e33a7db8b4b3831cbf5219ec4f7b58f859
sha256: 4cddd78dcf498bdd1b694e6fdd96df033c170deb6b5514361f9b562a405bdce2
sha512: 017f1c575a718772515c746b7ee0e0baf9d4052ca1c791181c908015b9f98412d67814affe3cc2c5d68c1b07d7c49f6e7ffb99fcbf874844dcf7c7ceb05f9c0f
ssdeep: 24576:06/QYbYtAs7CNMyoDYM5439RZKzuR0UZqYNnnT:06JnI3UZ5nnT
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T10B557D24E70729F0DA675772854ED7778B1CBA458023AE7FFF6BDA18B4334123886162
sha3_384: 0d925e1aecdffc020aa697784b5e52846b53ffbf2f97591663cf426aaa4ccd3c47edeb0858d2fe3c68d71fb54444feca
ep_bytes: 83ec0cc705b8f3530000000000e84e20
timestamp: 2022-09-03 23:07:34

Version Info:
0: [No Data]

UDS:Trojan-Banker.Win32.Bandra.bdf also known as:

Cynet	Malicious (score: 100)
FireEye	Gen:Variant.Doris.12884
McAfee	GenericRXUB-PG!68DECF85733D
Cylance	Unsafe
Cybereason	malicious.33a7db
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Kryptik.HQOF
APEX	Malicious
Kaspersky	UDS:Trojan-Banker.Win32.Bandra.bdf
BitDefender	Gen:Variant.Doris.12884
MicroWorld-eScan	Gen:Variant.Doris.12884
Avast	FileRepMalware [Trj]
Rising	Trojan.Kryptik!8.8 (TFE:5:qFgFsCC2vGK)
Ad-Aware	Gen:Variant.Doris.12884
Emsisoft	Gen:Variant.Doris.12884 (B)
GData	Win32.Trojan.PSE.I7XB25
Arcabit	Trojan.Doris.D3254
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
AhnLab-V3	Malware/Win.Generic.C5231537
ALYac	Gen:Variant.Doris.12884
MAX	malware (ai score=80)
VBA32	BScope.TrojanPSW.RedLine
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/DotNetPacker.A!tr
BitDefenderTheta	Gen:NN.ZexaF.34606.pHW@aOZebLl
AVG	FileRepMalware [Trj]

How to remove UDS:Trojan-Banker.Win32.Bandra.bdf?

UDS:Trojan-Banker.Win32.Bandra.bdf removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X