Categories: Trojan

About “Win32/TrojanDownloader.Agent.FLS” infection

The Win32/TrojanDownloader.Agent.FLS is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/TrojanDownloader.Agent.FLS virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (1 unique times)
Creates RWX memory
A process attempted to delay the analysis task.
Reads data out of its own binary image
A process created a hidden window
Drops a binary and executes it
HTTP traffic contains suspicious features which may be indicative of malware related traffic
Performs some HTTP requests
Uses Windows utilities for basic functionality
Attempts to identify installed AV products by installation directory
Attempts to modify proxy settings
Creates a copy of itself
Harvests credentials from local FTP client softwares
Harvests information related to installed instant messenger clients
Harvests information related to installed mail clients

Related domains:

huxere.xyz

How to determine Win32/TrojanDownloader.Agent.FLS?


File Info:
crc32: 6B2A1F79md5: 15957b219a58f8a3379a7fe9eb5dd1b4name: 15957B219A58F8A3379A7FE9EB5DD1B4.mlwsha1: 4f72876aa9aa7a99d27f4718c8903eb73ddb8840sha256: 529897f05843cf28a7e9c36b6f0a49eb12ce3aa9fab8991fd1970c575031ab3dsha512: 9b11db50cad30614b73ae67641d48e83735d3f8df8fd6dc2a966cc84799a3f2ee691732573ff0a1a8f217e5f9c910c0dbab5fd3910ff47f0f23003fb32677198ssdeep: 3072:NlptXdVEEMvdY9EESy9C8m+OjbgPuFmA110HsGkJB8MVT:htXPTMvdOExyNbOsuFmA0HsGGTtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Win32/TrojanDownloader.Agent.FLS also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
FireEye	Generic.mg.15957b219a58f8a3
CAT-QuickHeal	Trojandownloader.Deyma
ALYac	Gen:Variant.Zusy.329294
Cylance	Unsafe
Sangfor	Malware
K7AntiVirus	Trojan ( 001ad16e1 )
BitDefender	Gen:Variant.Zusy.329294
K7GW	Trojan ( 001ad16e1 )
Cybereason	malicious.19a58f
BitDefenderTheta	Gen:NN.ZexaF.34700.luW@aOl4!Kji
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/TrojanDownloader.Agent.FLS
APEX	Malicious
Kaspersky	HEUR:Trojan-Downloader.Win32.Deyma.gen
Alibaba	TrojanDownloader:Win32/Deyma.63101706
AegisLab	Trojan.Win32.Deyma.a!c
MicroWorld-eScan	Gen:Variant.Zusy.329294
Rising	Trojan.Injector!8.C4 (TFE:5:MB7JTjGmRzO)
Ad-Aware	Gen:Variant.Zusy.329294
Emsisoft	Gen:Variant.Zusy.329294 (B)
Comodo	Malware@#21jwh46emvr3k
F-Secure	Heuristic.HEUR/AGEN.1116859
DrWeb	Trojan.DownLoader36.28761
McAfee-GW-Edition	BehavesLike.Win32.Dropper.ch
Sophos	Mal/Generic-S
SentinelOne	Static AI – Suspicious PE
Jiangmin	TrojanDownloader.Deyma.tc
Avira	HEUR/AGEN.1116859
MAX	malware (ai score=84)
Kingsoft	Win32.Heur.KVMH017.a.(kcloud)
Microsoft	Trojan:Win32/Ymacco.AA52
Gridinsoft	Trojan.Win32.Downloader.vb
Arcabit	Trojan.Zusy.D5064E
AhnLab-V3	Malware/Win32.Generic.C4218541
ZoneAlarm	HEUR:Trojan-Downloader.Win32.Deyma.gen
GData	Win32.Trojan.Deyma.A
McAfee	GenericRXAA-AA!15957B219A58
Malwarebytes	Trojan.Amadey
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R002H0CLR20
Tencent	Win32.Trojan-downloader.Deyma.Dygr
Ikarus	Trojan.Win32.Injector
eGambit	Unsafe.AI_Score_77%
Fortinet	W32/DDC!tr
AVG	Win32:BotX-gen [Trj]
Avast	Win32:BotX-gen [Trj]
Qihoo-360	Win32/Trojan.BO.651