Categories: Trojan

About “Win32/TrojanDownloader.Agent.HIO” infection

The Win32/TrojanDownloader.Agent.HIO is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/TrojanDownloader.Agent.HIO virus can do?

Behavioural detection: Executable code extraction – unpacking
Sample contains Overlay data
Performs HTTP requests potentially not found in PCAP.
Reads data out of its own binary image
Drops a binary and executes it
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Behavioural detection: Injection (inter-process)
Attempts to modify proxy settings
Deletes executed files from disk

How to determine Win32/TrojanDownloader.Agent.HIO?


File Info:
name: D5AB14DA9EA486F727EF.mlwpath: /opt/CAPEv2/storage/binaries/14bd85b302f6727be2e0c1c49f1086553d0140e6281d915def795a5fc0b4a0decrc32: EE0E756Amd5: d5ab14da9ea486f727ef8677c268a382sha1: ec538a8740b79dea217b51f775d443ad5a30f900sha256: 14bd85b302f6727be2e0c1c49f1086553d0140e6281d915def795a5fc0b4a0desha512: 31ad7aa9c1453ee9fa615c488f64edfa90bd0b96b5fffbe3be228b5f9febb770809670f56f04c8673b98ab728e5917f86c476375bfba1c44e16fe50e298097acssdeep: 24576:s7FUDowAyrTVE3U5F/9GqKIHGKic6QL3E2vVsjECUAQT45deRV9Ry:sBuZrEUIfKIy029s4C1eH9Mtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1AE85BF3FF268A13EC46A1B3245739310997BBA61B81A8C1E47FC344DCF765601E3B656sha3_384: b2b8f2d4316497bb051037ce9e4c033828c3c9de3120fd77e58a765624622869055e431510c7bdde39d0f4b9a1c05221ep_bytes: 558bec83c4a453565733c08945c48945timestamp: 2023-02-15 14:54:16
Version Info:
Comments: This installation was built with Inno Setup.CompanyName:                                                             FileDescription: How To OPTIMIZE Windows 1011 for Gaming  - Best Free Tools TFileVersion: 1.1.9.0             LegalCopyright: How To OPTIMIZE Windows 1011 for Gaming  - Best Free Tools To Boost Your FPS - Max FPS Settings - OnOriginalFileName:                                                   ProductName: How To OPTIMIZE Windows 1011 for Gaming  - Best Free Tools TProductVersion: 1.1.9.0                                           Translation: 0x0000 0x04b0

Win32/TrojanDownloader.Agent.HIO also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.OffLoader.a!c
Elastic	malicious (high confidence)
Skyhigh	BehavesLike.Win32.Trojan.tc
McAfee	Artemis!D5AB14DA9EA4
Cylance	unsafe
Sangfor	Downloader.Win32.Agent.V3ui
CrowdStrike	win/malicious_confidence_90% (D)
Alibaba	TrojanDownloader:Win32/OffLoader.c54e6cf2
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of Win32/TrojanDownloader.Agent.HIO
APEX	Malicious
Kaspersky	HEUR:Trojan-Downloader.Win32.OffLoader.gen
Avast	FileRepMalware [Misc]
Tencent	Win32.Trojan-Downloader.Oader.Kjgl
Sophos	Mal/Generic-S
F-Secure	Heuristic.HEUR/AGEN.1372992
Ikarus	PUA.INNO.Offer
Google	Detected
Avira	HEUR/AGEN.1372992
Varist	W32/OffLoader.A.gen!Eldorado
ZoneAlarm	HEUR:Trojan-Downloader.Win32.OffLoader.gen
Cynet	Malicious (score: 100)
Malwarebytes	Generic.Malware/Suspicious
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.300983.susgen
AVG	FileRepMalware [Misc]
DeepInstinct	MALICIOUS
alibabacloud	Trojan[downloader]:Win/OffLoader.gen