Win32/Runner [Threat Name] go to Threat

Win32/Runner.NCA [Threat Variant Name]

Category trojan
Size 76800 B
Aliases RiskTool.Win32.Agent.acuj (Kaspersky)
  Trojan.Coinapp.1 (Dr.Web)
Short description

The trojan has a simple payload. The file is run-time compressed using UPX .


The trojan does not create any copies of itself.

The trojan is usually a part of other malware.

Other information

The trojan executes the following files:

  • %currentfolder%\­%variable%

A string with variable content is used instead of %variable% .

The malware configuration is passed as command line parameters when the malware executable is launched.

Please enable Javascript to ensure correct displaying of this content and refresh this page.