Categories: Malware

W32/Gamarue-BM malicious file

The W32/Gamarue-BM is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What W32/Gamarue-BM virus can do?

Sample contains Overlay data
Authenticode signature is invalid

How to determine W32/Gamarue-BM?


File Info:
name: E40FEC93972CCB924324.mlwpath: /opt/CAPEv2/storage/binaries/bc864e75e938bdda7fbdb6a017d63b892c4b2a3206133ab93d02cc3509d5e0c9crc32: 3FAA61FBmd5: e40fec93972ccb924324d4cc070c2d00sha1: 89ba63724c1e7bf6229fbf30852f15869cc58fb6sha256: bc864e75e938bdda7fbdb6a017d63b892c4b2a3206133ab93d02cc3509d5e0c9sha512: bbfc03b0040f391e39052cd52faf62c65bb6b8c795c3e9e0bf55fe981f1b827b5f69319c62287d36dcc0ab678a4471e154f005c449cda841bd0027484583d1a9ssdeep: 48:SWkO0IoyTnXz+ihZjokkyH2mviaJ5dt5eFJHQdSDYlJ5O1:ZJTnXzvokwaJ5VqMSeO1type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windowstlsh: T19CA14A37B3B46A33E02487332F6745C77C395BA40368078B8A723147101501B9CA9F2Bsha3_384: 099b89fc9bd5d0dce97cff2c4674051e6dcd7732d3ffce06882cf1372c53d976ead62e0f6f4f31d206531d85ebb6e5a6ep_bytes: 558bec538b5d08568b750c578b7d1085timestamp: 2013-04-07 20:00:59
Version Info:
0: [No Data]

W32/Gamarue-BM also known as:

Bkav	W32.FamVT.DebrisB.Worm
Lionic	Worm.Win32.Debris.mrOd
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Barys.431082
FireEye	Generic.mg.e40fec93972ccb92
CAT-QuickHeal	Trojan.Agent.WL
ALYac	Gen:Variant.Barys.431082
Cylance	unsafe
VIPRE	Gen:Variant.Barys.431082
Sangfor	Suspicious.Win32.Save.ins
CrowdStrike	win/malicious_confidence_100% (D)
Alibaba	Worm:Win32/Debris.f564a81c
K7GW	EmailWorm ( 0040f50c1 )
K7AntiVirus	EmailWorm ( 0040f50c1 )
Baidu	Win32.Worm.Bundpil.ah
VirIT	Trojan.Win32.Small.FAU
Symantec	Trojan.Dropper
ESET-NOD32	Win32/Bundpil.T
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	Worm.Win32.Debris.b
BitDefender	Gen:Variant.Barys.431082
NANO-Antivirus	Trojan.Win32.Drop.bqqvjw
SUPERAntiSpyware	Trojan.Agent/Gen-Downloader
Tencent	Trojan.Win32.Csyr.A
Emsisoft	Gen:Variant.Barys.431082 (B)
F-Secure	Trojan.TR/Downloader.Gen
DrWeb	Trojan.MulDrop4.25343
Zillya	Worm.Bundpil.Win32.1334
Trapmine	suspicious.low.ml.score
Sophos	W32/Gamarue-BM
Ikarus	Worm.Debris
Jiangmin	Worm/Generic.aftt
Google	Detected
Avira	TR/Downloader.Gen
Antiy-AVL	Trojan/Win32.Csyr
Kingsoft	malware.kb.a.976
Xcitium	Worm.Win32.Bundpil.T@4wizl6
Arcabit	Trojan.Barys.D693EA
ZoneAlarm	Worm.Win32.Debris.b
GData	Win32.Trojan.PSE.1Y5UO7M
Varist	W32/Csyr.A!Eldorado
AhnLab-V3	Worm/Win32.Bundpil.R63957
Acronis	suspicious
BitDefenderTheta	Gen:NN.ZedlaF.36802.aq5@aejr6Qm
MAX	malware (ai score=100)
DeepInstinct	MALICIOUS
VBA32	Worm.Gamarue
Malwarebytes	Bundpil.Worm.AutoRun.DDS
TrendMicro-HouseCall	WORM_GAMARUE.SMB
Rising	Worm.Bundpil!1.E3E2 (CLASSIC)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Generic!worm
Panda	Trj/Genetic.gen
alibabacloud	Worm:Win/Bundpil.T