Categories: Malware

Win32:Banker-NBH [Trj] information

The Win32:Banker-NBH [Trj] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32:Banker-NBH [Trj] virus can do?

Reads data out of its own binary image
Drops a binary and executes it
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Network activity detected but not expressed in API logs
Creates a slightly modified copy of itself
Anomalous binary characteristics

How to determine Win32:Banker-NBH [Trj]?


File Info:
crc32: 30DDA5B4md5: 15e96867c9ceaf83df6bf84c5cb2ad4ename: 15E96867C9CEAF83DF6BF84C5CB2AD4E.mlwsha1: 035fdeafcc61b4844473db6c43ae249024a09fefsha256: 125dabd4810262b9c261bc5682ca9a86aa7ad2359fe7a770c440eb4d9c3505ffsha512: ad0e24c8b2712ffd9d606681583041ba1a0b5ddb21e8a449813fdb97c7a2d0c8fa60b9c2e8047f1ac0040d12292474d75ca8f2452bd8542358d297ecff1c885assdeep: 3072:ChOmTsF93UYfwC6GIoutAep8KnTMPg3YtjQ1HpQNYNzWq+qCq+qXunk1V4Ei6Kx:Ccm4FmowdHoSRt5BC64type: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed, PECompact2 compressed
Version Info:
0: [No Data]

Win32:Banker-NBH [Trj] also known as:

Bkav	W32.FamVT.DinwoodAATTC.Worm
K7AntiVirus	Riskware ( 0040eff71 )
DrWeb	Trojan.Inject1.58305
MicroWorld-eScan	Gen:Variant.Razy.596401
ALYac	Gen:Variant.Razy.596401
Cylance	Unsafe
Zillya	Dropper.DinwodGen.Win32.1
Sangfor	Malware
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	TrojanDropper:Win32/Dinwod.65461762
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.7c9cea
TrendMicro	TrojanSpy.Win32.BANKER.SMJC
Baidu	Win32.Trojan.Agent.acb
Cyren	W32/Trojan.HJVI-2850
ESET-NOD32	a variant of Win32/Packed.BlackMoon.A potentially unwanted
APEX	Malicious
TotalDefense	Win32/Oflwr.A!crypt
Avast	Win32:Banker-NBH [Trj]
ClamAV	Win.Trojan.Agent-1388676
GData	Gen:Variant.Razy.596401
Kaspersky	Trojan-Dropper.Win32.Dinwod.acqn
BitDefender	Gen:Variant.Razy.596401
NANO-Antivirus	Trojan.Win32.Dinwod.ejafor
ViRobot	Trojan.Win32.Agent.69310
SUPERAntiSpyware	Trojan.Agent/Gen-Dropper
Tencent	Trojan.Win32.GameteaSpy.a
Ad-Aware	Gen:Variant.Razy.596401
Sophos	Troj/Eydrop-A
Comodo	Packed.Win32.MUPX.Gen@24tbus
F-Secure	Trojan.TR/Crypt.ULPM.Gen
BitDefenderTheta	Gen:NN.ZexaF.34108.mmJfa017ibi
VIPRE	Trojan.Win32.Agent.xfc (v)
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.Dropper.dm
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.15e96867c9ceaf83
Emsisoft	Gen:Variant.Razy.596401 (B)
SentinelOne	DFI – Malicious PE
F-Prot	W32/Trojan2.QAPL
Jiangmin	TrojanDropper.Dinwod.ale
Webroot	W32.Trojan.Agent.Gen
Avira	TR/Crypt.ULPM.Gen
eGambit	Unsafe.AI_Score_100%
Antiy-AVL	Trojan[Dropper]/Win32.Dinwod
Microsoft	TrojanDropper:Win32/Dinwod
Arcabit	Trojan.Razy.D919B1
AegisLab	Trojan.Win32.Dinwod.mxkF
ZoneAlarm	Trojan-Dropper.Win32.Dinwod.acqn
AhnLab-V3	Dropper/Win32.Dinwod.C3090206
Acronis	suspicious
McAfee	Dropper-FVF!15E96867C9CE
MAX	malware (ai score=82)
VBA32	TrojanDropper.Dinwod
Malwarebytes	Trojan.Dropper
TrendMicro-HouseCall	TrojanSpy.Win32.BANKER.SMJC
Rising	Trojan.Agent!1.AB1D (CLOUD)
Yandex	Trojan.DR.Dinwod!uVRTdtgm1dY
Ikarus	Trojan-Dropper.Win32.Dinwod
MaxSecure	Dropper.Dinwod.unm
Fortinet	W32/Agent.7136!tr
AVG	Win32:Banker-NBH [Trj]
Paloalto	generic.ml
Qihoo-360	Win32/Trojan.Dropper.852