Win32/TrojanDownloader.Agent.HNK information

The Win32/TrojanDownloader.Agent.HNK is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/TrojanDownloader.Agent.HNK virus can do?

Sample contains Overlay data
Performs HTTP requests potentially not found in PCAP.
Reads data out of its own binary image
Authenticode signature is invalid
Attempts to modify proxy settings
Deletes executed files from disk

How to determine Win32/TrojanDownloader.Agent.HNK?


File Info:
name: 308824C246659E9D8F02.mlw
path: /opt/CAPEv2/storage/binaries/cbad2c916b92eff806e3410a9d5956558c80f1fde1573aad6a0eb6382a93099b
crc32: B845E377
md5: 308824c246659e9d8f02a4d1870967ad
sha1: f973c603868abb7f21518c1485e7243d533ae8e2
sha256: cbad2c916b92eff806e3410a9d5956558c80f1fde1573aad6a0eb6382a93099b
sha512: a51ef864fe5793ce36a8d5e273d196d8025b16d038ac1be1259ae4b7191d24ee6aa228ec540fbbef5c401a1f94f2839775db4354b9e0252a5b96388d389b501a
ssdeep: 1536:rferrLkSRoe8C4UZsys0Dh1duq4Romu/7qqFI+PlY:rfi3k+oWDBDh1duq45LfWlY
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T19963BE01E390C077D9B60771683B2BBB5FF6992512A49B0703906F2E7CA2681DD1F7A6
sha3_384: e599b7128fbbef8ddf4bd4b9de0e7533a6e5c4b9dbb12f02af7583ae684da9d9cba7b9311c5c8250d8b69845188f8561
ep_bytes: 81ecf80300005556576a205f33ed6801
timestamp: 2023-07-02 02:09:48

Version Info:
0: [No Data]

Win32/TrojanDownloader.Agent.HNK also known as:

Lionic	Trojan.Win32.Adload.a!c
Cylance	unsafe
Sangfor	Downloader.Win32.Agent.Vecc
Alibaba	TrojanDownloader:Win32/OffLoader.08aa967d
Symantec	Trojan.Gen.MBT
ESET-NOD32	Win32/TrojanDownloader.Agent.HNK
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan-Downloader.Win32.OffLoader.gen
Avast	NSIS:DropperX-gen [Drp]
Tencent	Win32.Trojan-Downloader.Oader.Kcnw
F-Secure	Trojan.TR/Adload.Gen
DrWeb	Trojan.DownLoad4.16191
Trapmine	malicious.moderate.ml.score
Sophos	Mal/Generic-S
Google	Detected
Avira	TR/Adload.Gen
Antiy-AVL	Trojan[Downloader]/NSIS.AdLoad.ds
ZoneAlarm	HEUR:Trojan-Downloader.Win32.OffLoader.gen
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Varist	W32/Trojan.CZNG-2275
VBA32	suspected of Trojan.Downloader.gen
Malwarebytes	Generic.Malware/Suspicious
Fortinet	NSIS/Agent.HNK!tr
AVG	NSIS:DropperX-gen [Drp]
DeepInstinct	MALICIOUS

How to remove Win32/TrojanDownloader.Agent.HNK?

Win32/TrojanDownloader.Agent.HNK removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X