Categories: Malware

Win32/Injector.DTRE (file analysis)

The Win32/Injector.DTRE is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Injector.DTRE virus can do?

Executable code extraction
Creates RWX memory
A process created a hidden window
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Uses Windows utilities for basic functionality
Collects information to fingerprint the system
Anomalous binary characteristics

How to determine Win32/Injector.DTRE?


File Info:
crc32: 6B5F0542md5: 686d2d7fe39dbf0a485f010f426ab969name: 686D2D7FE39DBF0A485F010F426AB969.mlwsha1: 3edf6c4eac37b94ca4b4c902358653c493f791b8sha256: 26557c6bfa99fcfacb0ff069576f23a0272c068305f1bec0e19923865a765148sha512: b6edc3af09e4c522a89d79d57a3ff002c48f1a4cbf6ac7c86d08674197c16ce2ab6643bf27d7df39a8c7671114f308edf53609311b457c5f89300381c4e44586ssdeep: 12288:S5yG18zxVbJFb7eZD22Gr8z4b9YCenURmlhJ1:S5yG18zxVdFHe8Bb9CnURa1type: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
Translation: 0x0804 0x04b0LegalCopyright: MuronicsInternalName: TuberizationFileVersion: 9.07.0006CompanyName:  Epson LegalTrademarks: MuronicsComments: MuronicsProductName: MuronicsProductVersion: 9.07.0006FileDescription: MuronicsOriginalFilename: Tuberization.exe

Win32/Injector.DTRE also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Heur.PonyStealer.Fm1@dK2h6qob
FireEye	Generic.mg.686d2d7fe39dbf0a
Qihoo-360	Win32/Trojan.5d4
ALYac	Gen:Heur.PonyStealer.Fm1@dK2h6qob
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Riskware ( 0040eff71 )
BitDefender	Gen:Heur.PonyStealer.Fm1@dK2h6qob
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.fe39db
Cyren	W32/Cerber.BR.gen!Eldorado
Symantec	Ransom.Cerber
APEX	Malicious
Avast	Win32:Trojan-gen
ClamAV	Win.Ransomware.Zerber-7056238-0
Kaspersky	Trojan-Ransom.Win32.Zerber.dzzx
Alibaba	Ransom:Win32/generic.ali2000010
NANO-Antivirus	Trojan.Win32.Zerber.eoeztj
ViRobot	Trojan.Win32.U.Cerber.522922
Rising	Ransom.Cerber!8.3058 (CLOUD)
Ad-Aware	Gen:Heur.PonyStealer.Fm1@dK2h6qob
Emsisoft	Gen:Heur.PonyStealer.Fm1@dK2h6qob (B)
Comodo	Malware@#2eq7iw9akcnxk
DrWeb	Trojan.Siggen7.21157
Zillya	Trojan.Zerber.Win32.3392
TrendMicro	Ransom_CERBER.F117E8
McAfee-GW-Edition	BehavesLike.Win32.Fareit.hm
Sophos	Mal/Generic-R + Mal/FareitVB-M
Ikarus	Trojan.Win32.Krypt
Webroot	W32.Ransom.Gen
Avira	HEUR/AGEN.1107758
MAX	malware (ai score=88)
Microsoft	Trojan:Win32/Tnega!ml
AhnLab-V3	Win-Trojan/VBKrypt.RP.X1764
GData	Gen:Heur.PonyStealer.Fm1@dK2h6qob
Cynet	Malicious (score: 100)
ESET-NOD32	a variant of Win32/Injector.DTRE
McAfee	Ransomware-FMGJ!686D2D7FE39D
VBA32	Hoax.Zerber
Panda	Trj/GdSda.A
TrendMicro-HouseCall	Ransom_CERBER.F117E8
Tencent	Malware.Win32.Gencirc.10bbb5d1
Yandex	Trojan.GenAsa!YwjsvyDq0DY
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_99%
Fortinet	W32/GenKryptik.CJGS!tr
BitDefenderTheta	Gen:NN.ZevbaF.34608.Fm1@aK2h6qob
AVG	Win32:Trojan-gen
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_100% (D)
MaxSecure	Trojan.Malware.300983.susgen