Categories: Malware

What is “Win32/Agent.UJM”?

The Win32/Agent.UJM is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Agent.UJM virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
At least one process apparently crashed during execution
A HTTP/S link was seen in a script or command line
Authenticode signature is invalid
Uses Windows utilities for basic functionality

How to determine Win32/Agent.UJM?


File Info:
name: B7CA2C79C621FE272426.mlwpath: /opt/CAPEv2/storage/binaries/8e9a80ad58c0c3fe7395d659661eaebacd5fc873d25eaf6d77c956ba228a0833crc32: C72B4122md5: b7ca2c79c621fe272426f072201b5d2bsha1: 1eb8a0dcca1ff73e6decaf179802448a426f7ba2sha256: 8e9a80ad58c0c3fe7395d659661eaebacd5fc873d25eaf6d77c956ba228a0833sha512: d053304320b674b686915a9531c4db28abfed95e41f39fd50e66790e936082924e9f148f33bf1d13c340678a075a907b34eafaec786a8a65f118cc6f99b7e48bssdeep: 24576:EQtip7Ze/MEnluxrM+wVJMywlBDatug1K:EYS7nEluRUA6type: PE32 executable (console) Intel 80386, for MS Windowstlsh: T1C0352B39EB0615F4D61367B6819EEB7B9B18BA198072EE7FFF4BC608B0330123845595sha3_384: d0c91b22e3d067d83109cfaf4f1970bd93c7a828307c3ea1c0d600dc835b660cf8e89d37bb2d8b7141acfc763f3b742dep_bytes: 83ec1cc7042401000000ff1538c35000timestamp: 2022-05-02 13:37:10
Version Info:
0: [No Data]

Win32/Agent.UJM also known as:

Elastic	malicious (moderate confidence)
ESET-NOD32	a variant of Win32/Agent.UJM
APEX	Malicious
BitDefender	Gen:Heur.Mint.Titirez.cHW@pa3gRSm
MicroWorld-eScan	Gen:Heur.Mint.Titirez.cHW@pa3gRSm
Ad-Aware	Gen:Heur.Mint.Titirez.cHW@pa3gRSm
F-Secure	Heuristic.HEUR/AGEN.1231816
FireEye	Gen:Heur.Mint.Titirez.cHW@pa3gRSm
Emsisoft	Gen:Heur.Mint.Titirez.cHW@pa3gRSm (B)
GData	Gen:Heur.Mint.Titirez.cHW@pa3gRSm
Avira	HEUR/AGEN.1231816
Arcabit	Trojan.Mint.Titirez.EC791A
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
ALYac	Gen:Heur.Mint.Titirez.cHW@pa3gRSm
MAX	malware (ai score=88)
Cylance	Unsafe
Ikarus	Trojan.Win32.Swrort
MaxSecure	Trojan.Malware.300983.susgen