Categories: Worm

Worm:Win32/Eggnog!pz (file analysis)

The Worm:Win32/Eggnog!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Worm:Win32/Eggnog!pz virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Worm:Win32/Eggnog!pz?


File Info:
name: 96CB91A220FD9FF44466.mlwpath: /opt/CAPEv2/storage/binaries/0f3e8da753a733214680408fbeb556c58642b793c0a977e95a189de8a9f75509crc32: FCAF3990md5: 96cb91a220fd9ff44466799478edbeb5sha1: 0d30f7a2951632a3d15268739f4280d8224e2d5fsha256: 0f3e8da753a733214680408fbeb556c58642b793c0a977e95a189de8a9f75509sha512: 71fe6d38f48794457fa8c8caf22737fc488253d0fbedb61c54899b92d15e3cbf1fe41904c929c2932adad22b87fda1bff4f0eeb089030cf12409ea5abd81742dssdeep: 1536:CBd9s+QN/UR+XjMM3gTirvqVuO9yxchZb9Tzsm2fETKK41:MCNsAjciWVuO9yxch1Fz72fH1type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1897302EBE2A049EBE0C7543CCD817EE20A8966F4146CF2F614F47B1B235756C8C1A65Bsha3_384: 646684c3d60233d7a0c9da3c16b3dd20c0e4019f6084ed9881ed1859074a6218fbceae71f87e1d86526bb17cef8fa533ep_bytes: b800324100ffe0f68a0b07724e8c2e3etimestamp: 1992-06-19 22:22:17
Version Info:
0: [No Data]

Worm:Win32/Eggnog!pz also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Eggnog.4!c
MicroWorld-eScan	DeepScan:Generic.Malware.Nm!p2p!u.0909AFEF
FireEye	Generic.mg.96cb91a220fd9ff4
CAT-QuickHeal	Trojan.Vindor.S30345357
Skyhigh	BehavesLike.Win32.Generic.lc
ALYac	DeepScan:Generic.Malware.Nm!p2p!u.0909AFEF
Malwarebytes	Generic.Malware.AI.DDS
VIPRE	DeepScan:Generic.Malware.Nm!p2p!u.0909AFEF
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Trojan ( 005568151 )
BitDefender	DeepScan:Generic.Malware.Nm!p2p!u.0909AFEF
K7GW	Trojan ( 005568151 )
Cybereason	malicious.295163
BitDefenderTheta	AI:Packer.2FC5FDE521
VirIT	Worm.Win32.Eggnog.AE
Symantec	W32.Nofer.A@mm
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Eggnog.E
Cynet	Malicious (score: 100)
APEX	Malicious
ClamAV	Win.Worm.Eggnog-9
Kaspersky	HEUR:Trojan.Win32.Generic
Alibaba	Worm:Win32/Eggnog.f254
NANO-Antivirus	Trojan.Win32.Kazaa.fvlecs
Rising	Worm.Soltern!1.BB24 (CLASSIC)
Emsisoft	DeepScan:Generic.Malware.Nm!p2p!u.0909AFEF (B)
F-Secure	Dropper.DR/Delphi.Gen
DrWeb	Win32.HLLW.Google.24577
Zillya	Trojan.Generic.Win32.924175
TrendMicro	TROJ_GEN.R002C0DK323
Trapmine	malicious.high.ml.score
Sophos	W32/Systro-AB
Ikarus	Trojan-Dropper.Delf
Jiangmin	Trojan.Generic.fejfa
Varist	W32/Eggnog.A2.gen!Eldorado
Avira	DR/Delphi.Gen
Antiy-AVL	GrayWare/Win32.Generic
Kingsoft	malware.kb.a.1000
Microsoft	Worm:Win32/Eggnog!pz
Gridinsoft	Trojan.Win32.Generic.sa
Arcabit	DeepScan:Generic.Malware.Nm!p2p!u.0909AFEF
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Win32.Trojan.PSE.1I1RGIY
Google	Detected
AhnLab-V3	Trojan/Win32.Hupigon.C34077
Acronis	suspicious
McAfee	GenericRXKS-GQ!96CB91A220FD
MAX	malware (ai score=84)
DeepInstinct	MALICIOUS
VBA32	BScope.Worm.Pluto
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	TROJ_GEN.R002C0DK323
Tencent	Worm.Win32.Eggnog.za
Yandex	Trojan.GenAsa!9WQyNROzKr8
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Parite.C
AVG	Win32:Evo-gen [Trj]
Avast	Win32:Evo-gen [Trj]
CrowdStrike	win/malicious_confidence_100% (W)