Categories: Spy

Win32/Spy.Banker.VJ malicious file

The Win32/Spy.Banker.VJ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Spy.Banker.VJ virus can do?

Unconventionial language used in binary resources: Portuguese (Brazilian)
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Creates a copy of itself

How to determine Win32/Spy.Banker.VJ?


File Info:
name: C2592B38BE447F5AA453.mlwpath: /opt/CAPEv2/storage/binaries/50801b8cc17fd9bc259968b368ec63b25f98f1e6b3b046e0ad1f94626107326fcrc32: 384A9087md5: c2592b38be447f5aa453d3fb9b0ec6ddsha1: 5840f38ae3e49080375411fe5be65df725a1e989sha256: 50801b8cc17fd9bc259968b368ec63b25f98f1e6b3b046e0ad1f94626107326fsha512: b81d6e8e33fee0c5d4cc5d3f853ad83fb3e20fdf12cfb381aeb2fa6e127b15952800b676118aad628aab17e1e719752098dc6efc3734bab80c7f4c946d72f316ssdeep: 98304:muZHBBBBBBBBcBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB0:mmtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1A9062B6C7932B011D512163E3B199BD590EBAFCBEB07EB4624C53AC8DB732D47E14A12sha3_384: 8a30f8f94f099b816856244eba739367f116f13106ece5c87c43719c3b474ed3d5b29478bf737e4e0851241cbd675611ep_bytes: 558bec83c4f053b858104900e87b4bf7timestamp: 1992-06-19 22:22:17
Version Info:
0: [No Data]

Win32/Spy.Banker.VJ also known as:

Bkav	W32.Common.22322A35
Lionic	Trojan.Win32.Banker.l755
AVG	Win32:Agent-ALK [Trj]
MicroWorld-eScan	Gen:Trojan.SMTP-Mailer.QJW@auckP4dG
FireEye	Generic.mg.c2592b38be447f5a
CAT-QuickHeal	Trojan.Banker.10032
Skyhigh	PWS-Banker.gen.t
ALYac	Gen:Trojan.SMTP-Mailer.QJW@auckP4dG
Malwarebytes	Banker.Trojan.Stealer.DDS
Zillya	Trojan.Banker.Win32.33289
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	TrojanSpy:Win32/Banker.4e26e0fc
K7GW	Spyware ( 0055e3db1 )
K7AntiVirus	Spyware ( 0055e3db1 )
BitDefenderTheta	AI:Packer.394AA94B20
Symantec	Infostealer.Banpaes
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Spy.Banker.VJ
Cynet	Malicious (score: 99)
APEX	Malicious
ClamAV	Win.Trojan.Bancos-830
Kaspersky	HEUR:Trojan-Dropper.Win32.Sysn.gen
BitDefender	Gen:Trojan.SMTP-Mailer.QJW@auckP4dG
NANO-Antivirus	Trojan.Win32.Banker.vxhx
Avast	Win32:Agent-ALK [Trj]
Tencent	Malware.Win32.Gencirc.13fef0b8
Emsisoft	Gen:Trojan.SMTP-Mailer.QJW@auckP4dG (B)
Baidu	Win32.Trojan-Spy.Banker.a
F-Secure	Trojan.TR/Spy.Banker.Gen
DrWeb	Trojan.PWS.Banker.based
VIPRE	Gen:Trojan.SMTP-Mailer.QJW@auckP4dG
TrendMicro	TROJ_BANKER.SMTX
Trapmine	suspicious.low.ml.score
Sophos	Troj/Bancb-Fam
SentinelOne	Static AI – Malicious PE
GData	Gen:Trojan.SMTP-Mailer.QJW@auckP4dG
Jiangmin	TrojanSpy.Banker.gug
Webroot	W32.InfoStealer.Bancos
Varist	W32/Banker.D.gen!Eldorado
Avira	TR/Spy.Banker.Gen
Antiy-AVL	Trojan[Banker]/Win32.Banker
Kingsoft	Win32.Trojan.Generic.a
Xcitium	TrojWare.Win32.TrojanSpy.Banker.~AQL@4xjt1
Arcabit	Trojan.SMTP-Mailer.E39C71
ViRobot	Trojan.Win32.A.Banker.3833856.D
ZoneAlarm	HEUR:Trojan-Dropper.Win32.Sysn.gen
Microsoft	TrojanSpy:Win32/Banker
Google	Detected
AhnLab-V3	Trojan/Win32.Banker.R11267
McAfee	PWS-Banker.gen.t
MAX	malware (ai score=100)
VBA32	BScope.Trojan.Cosmu
Cylance	unsafe
Panda	Trj/Banker.ITS
TrendMicro-HouseCall	TROJ_BANKER.SMTX
Rising	Spyware.Banker!1.CEB7 (CLASSIC)
Yandex	Trojan.GenAsa!wrtWWMwOIAE
Ikarus	Trojan-Banker.Win32.Banz
MaxSecure	Trojan.Malware.1385733.susgen
Fortinet	W32/Banker.BIG!tr.spy
Cybereason	malicious.8be447
DeepInstinct	MALICIOUS
alibabacloud	Trojan[spy]:Win/Banker.VJ