Categories: Worm

Worm.Agent.SM (file analysis)

The Worm.Agent.SM is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Worm.Agent.SM virus can do?

Authenticode signature is invalid
Binary file triggered YARA rule
Yara detections observed in process dumps, payloads or dropped files

How to determine Worm.Agent.SM?


File Info:
name: 070E6CF4D7E536419670.mlwpath: /opt/CAPEv2/storage/binaries/3d9d3ebd93fb895ec78081dbfa98dd34e12d0aa4380b234d7ada116b38819800crc32: D0AC0982md5: 070e6cf4d7e5364196700c735f5768c1sha1: 9d5e547bf21d9c6d85f66163dff8e2f67123bd10sha256: 3d9d3ebd93fb895ec78081dbfa98dd34e12d0aa4380b234d7ada116b38819800sha512: b537bff2a72651ad5d58a5e1c45f924da18fbba379260a5b04548d843d55e0ee07ab031199ac382288c85fac1ef23a2030139861f454e6f04915cfe7f3a8aec1ssdeep: 48:qfAr1C9XDvrXkxLVvrhWR0Ui5X4nBvystYVzwGGQrux+iSZb2k4c:FrA1rrXk3vrY0x8duVzwGGQrux+RZUctype: PE32 executable (DLL) (GUI) Intel 80386, for MS Windowstlsh: T10C71B336B795FA73D098113216E72BDC206DDF29035301C70E99852AA86D3E07FF6B14sha3_384: 3919fed9985533b3e1dbc9b8cd7084b0a9ec34e6df7464e5142467d9cf6e4fa5d1d2a0bf9d6f3ace2e8f9aca1da7741aep_bytes: 558bec518b450c8945fc837dfc017402timestamp: 2013-07-02 21:12:18
Version Info:
0: [No Data]

Worm.Agent.SM also known as:

Bkav	W32.FamVT.DebrisA.Worm
MicroWorld-eScan	Gen:Variant.Zusy.325289
ClamAV	Win.Worm.Debris-4
FireEye	Generic.mg.070e6cf4d7e53641
CAT-QuickHeal	Trojan.Agent.WL
Skyhigh	Downloader-FOB!070E6CF4D7E5
ALYac	Gen:Variant.Zusy.325289
Cylance	unsafe
Zillya	Worm.DebrisGen.Win32.3
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Trojan ( 0040f52e1 )
K7GW	Trojan ( 0040f52e1 )
CrowdStrike	win/malicious_confidence_100% (W)
BitDefenderTheta	Gen:NN.ZedlaF.36802.aq4@aubLRpe
VirIT	Worm.Win32.Generic.BRR
Symantec	W32.Dromedan
Elastic	malicious (high confidence)
ESET-NOD32	Win32/Bundpil.BD
TrendMicro-HouseCall	WORM_GAMARUE.SMF
Cynet	Malicious (score: 100)
Kaspersky	Worm.Win32.Debris.al
BitDefender	Gen:Variant.Zusy.325289
NANO-Antivirus	Trojan.Win32.Debris.cfjcok
SUPERAntiSpyware	Trojan.Agent/Gen-Downloader
Avast	Win32:Sg-C [Trj]
Tencent	Worm.Win32.Debris.b
Emsisoft	Gen:Variant.Zusy.325289 (B)
Baidu	Win32.Worm.Bundpil.al
F-Secure	Worm.WORM/Gamarue.358494
DrWeb	Trojan.MulDrop4.25343
VIPRE	Gen:Variant.Zusy.325289
TrendMicro	WORM_GAMARUE.SMF
SentinelOne	Static AI – Malicious PE
Sophos	W32/Gamarue-BJ
Ikarus	Worm.Win32.Debris
Jiangmin	Worm/Debris.k
Webroot	W32.Worm.Gen
Avira	WORM/Gamarue.358494
Antiy-AVL	Worm/Win32.Debris.al
Kingsoft	malware.kb.a.1000
Microsoft	TrojanDownloader:Win32/Andromeda.SIB!MTB
Xcitium	Worm.Win32.Bundpil.BL@4zjaeb
Arcabit	Trojan.Zusy.D4F6A9
ViRobot	Trojan.Win32.Agent.3584.AX
ZoneAlarm	Worm.Win32.Debris.al
GData	Win32.Trojan.PSE1.RMRK9G
Varist	W32/Csyr.C.gen!Eldorado
AhnLab-V3	Trojan/Win32.Agent.R73096
Acronis	suspicious
McAfee	Downloader-FOB!070E6CF4D7E5
MAX	malware (ai score=81)
VBA32	Worm.Debris
Malwarebytes	Worm.Agent.SM
Panda	Trj/Vilsel.AF
APEX	Malicious
Rising	Worm.Gamarue!1.9CC6 (CLASSIC)
TACHYON	Worm/W32.Debris.3584.C
MaxSecure	Worm.Debris.Gen
Fortinet	W32/Bundpil.AA!tr
AVG	Win32:Sg-C [Trj]
DeepInstinct	MALICIOUS
alibabacloud	Worm:Win/Gamarue.efadea61