Categories: Virtool

Virtool.VBInject.VT6 (file analysis)

The Virtool.VBInject.VT6 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Virtool.VBInject.VT6 virus can do?

CAPE extracted potentially suspicious content
Unconventionial language used in binary resources: Korean
Authenticode signature is invalid
CAPE detected the shellcode patterns malware family
Anomalous binary characteristics
Yara detections observed in process dumps, payloads or dropped files

How to determine Virtool.VBInject.VT6?


File Info:
name: C230953680CF6BA1A260.mlwpath: /opt/CAPEv2/storage/binaries/34c281c1271f6d58203c49bde0d24f4913dd41734670688c8ea0237d0c996b28crc32: AF96E484md5: c230953680cf6ba1a26021a415498026sha1: 944703f03d03e13f0cc805ed235d2e9d9fc5eef5sha256: 34c281c1271f6d58203c49bde0d24f4913dd41734670688c8ea0237d0c996b28sha512: 14ea91c742f10ed98d4bf83a0b9a241b186f99299f2d429f18408542fe012b8b52b716ca1d67baf036e32841844134b0c48a96c6670df4a16c07587909873209ssdeep: 1536:Hli4rQcWAkV7GAhqbzfAIqVVOjoDTNyrILyEAs5useBsCXKaJogD0n:FHZWPy6J3ioDTN6Ns5aBscfDtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1EBC3190175C4F235D475213448D39FEE93BE7F1704AF26AA33047D8EBE762A62923685sha3_384: 85a8ad49f1727839e3d0f67ab6944f48ad991500ef3b0913e2abfa3c48d57194ed784cff96bc6d488564c587032459aaep_bytes: 558bec83ec34535657c745ec00000000timestamp: 2001-08-17 20:52:32
Version Info:
CompanyName: Microsoft CorporationFileDescription: Windows Calculator application fileFileVersion: 5.1.2600.0 (xpclient.010817-1148)InternalName: CALCLegalCopyright: ⓒ Microsoft Corporation. All rights reserved.OriginalFilename: CALC.EXEProductName: Microsoft® Windows® Operating SystemProductVersion: 5.1.2600.0Translation: 0x0412 0x04b0

Virtool.VBInject.VT6 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Yakes.lBOe
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Malware.Heur.1.!copidmbe!.hm0@b8SWklkG
CAT-QuickHeal	Virtool.VBInject.VT6
Skyhigh	BehavesLike.Win32.Virut.ch
McAfee	GenericRXAA-AA!C230953680CF
Cylance	unsafe
Zillya	Trojan.Yakes.Win32.5370
Sangfor	Trojan.Win32.Agent.V0lt
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:Win32/FakeMS.d58c14c0
VirIT	Trojan.Win32.Crypt.AE
Symantec	ML.Attribute.HighConfidence
tehtris	Generic.Malware
APEX	Malicious
TrendMicro-HouseCall	TROJ_GEN.R002C0RAU24
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Malware.Heur.1.!copidmbe!.hm0@b8SWklkG
NANO-Antivirus	Virus.Win32.Gen-Crypt.ccnc
Avast	Win32:Crypt-NQI [Trj]
Tencent	Win32.Trojan.Generic.Cdhl
Emsisoft	Gen:Malware.Heur.1.!copidmbe!.hm0@b8SWklkG (B)
F-Secure	Trojan.TR/Spy.J.130560
VIPRE	Gen:Malware.Heur.1.!copidmbe!.hm0@b8SWklkG
TrendMicro	TROJ_GEN.R002C0RAU24
FireEye	Generic.mg.c230953680cf6ba1
Sophos	Mal/Generic-S
SentinelOne	Static AI – Malicious PE
MAX	malware (ai score=99)
Jiangmin	Trojan/Yakes.gnl
Webroot	W32.Trojan.Gen
Google	Detected
Avira	TR/Spy.J.130560
Antiy-AVL	Trojan/Win32.Unknown
Kingsoft	malware.kb.a.1000
Xcitium	TrojWare.Win32.Spy.Agent.XYXT@4q9l90
Arcabit	Gen:Malware.Heur.1.!copidmbe!.E98D2A
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Gen:Malware.Heur.1.!copidmbe!.hm0@b8SWklkG
Cynet	Malicious (score: 99)
AhnLab-V3	Packed/Win32.PolyCrypt.R34486
BitDefenderTheta	AI:Packer.29C5F2261F
VBA32	Trojan.Yakes
Malwarebytes	Generic.Malware/Suspicious
Rising	Virus.Susvirus!1.9BC0 (CLASSIC)
Ikarus	Gen.Malware.Heur
Fortinet	W32/Kryptik.DZ!tr
AVG	Win32:Crypt-NQI [Trj]
Cybereason	malicious.680cf6
DeepInstinct	MALICIOUS
alibabacloud	Trojan[spy]:Win/Generic