Win32/TrojanDropper.Agent.SUN malicious file

The Win32/TrojanDropper.Agent.SUN is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/TrojanDropper.Agent.SUN virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Sample contains Overlay data
• Reads data out of its own binary image
• Drops a binary and executes it
• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid

How to determine Win32/TrojanDropper.Agent.SUN?

File Info:
name: B7369A55D234EDBAE026.mlw
path: /opt/CAPEv2/storage/binaries/32d32c812ddf392a63656fc042acd8884e6b73ccb372e2b2c656efb2037deb62
crc32: 85CD4977
md5: b7369a55d234edbae02653657cff7bbc
sha1: a3004798be899ee3f7ee8175fba1b3b87d2a5422
sha256: 32d32c812ddf392a63656fc042acd8884e6b73ccb372e2b2c656efb2037deb62
sha512: 4d33235cd04427f65844f59ce01d6ca4751b34e123a25df5c2b0174368d308673c4189c617c73aafcefc001adb93aa4356bbcffb17b5111c51c830b8db6733cc
ssdeep: 196608:weFmPi3AUXbo4G4WUGjXXQYxB3sOgQodMLGMISg8K2zTHbBd2a/nR:rma3Af4MbzX1B8OMw3/R
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T10DC6233FF258A43ED4AA1B3205B39360997B7E51A81A8C1E07FC344DCF765601E3B666
sha3_384: acd79b2b9233172f564f657988a664154eeefcb6fd2d4315bf1aaa8adab35298317411c55a2660da5d973639f25fc350
ep_bytes: 558bec83c4a453565733c08945c48945
timestamp: 2022-04-14 16:10:23

Version Info:
Comments: This installation was built with Inno Setup.
CompanyName: 3NkibnrvR Corporation                                       
FileDescription: 2S82ILXnh Inc. Setup                                        
FileVersion: 1.5                 
LegalCopyright:                                                                                                     
OriginalFileName:                                                   
ProductName: 2S82ILXnh Inc.                                              
ProductVersion: 2.1                                               
Translation: 0x0000 0x04b0

Win32/TrojanDropper.Agent.SUN also known as:

How to remove Win32/TrojanDropper.Agent.SUN?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.