Malware

What is “Generic.Application.CoinMiner.1.3BCA1021”?

Malware Removal

The Generic.Application.CoinMiner.1.3BCA1021 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Application.CoinMiner.1.3BCA1021 virus can do?

  • Possible date expiration check, exits too soon after checking local time
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Generic.Application.CoinMiner.1.3BCA1021?


File Info:

crc32: 33619CFF
md5: f061ad9ebdafe9478938ef958c819e08
name: upload_file
sha1: b10ca0a3c6b14059406dffbebde6f21cd87432d1
sha256: 90ed0d06f09c34c8f6359e5fa86e453d63e2537aacad5fc921c6c5dcf40e7dc9
sha512: 8efce279b17ba9575542ab2c7e9c17e0a5cdbbe221a46edfe6601e87dfe00705b70401d0cc444e3c25bef42e30eec7c550945f154f9d6e25fd7f44f72a7c0752
ssdeep: 24576:JRBrzwX0YmJI8DRnCD4jtnT8Q1r0ly78ipwR7:7Jzdnm4lT8Q1r0pieR7
type: PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed

Version Info:

LegalCopyright: (c) . All rights reserved.
InternalName: CommonUtils.dll
FileVersion: 1.0.0.1
CompanyName: Industrial and Commercial Bank of China
ProductName: CommonUtils
ProductVersion: 1.0.0.1
FileDescription: CommonUtils
OriginalFilename: CommonUtils.dll
Translation: 0x0409 0x04e4

Generic.Application.CoinMiner.1.3BCA1021 also known as:

BkavW32.FamVT.NusdenGP.Trojan
Elasticmalicious (high confidence)
MicroWorld-eScanGeneric.Application.CoinMiner.1.3BCA1021
FireEyeGeneric.mg.f061ad9ebdafe947
CAT-QuickHealPUA.CoinminerPMF.S9547169
McAfeeGenericRXAA-AA!F061AD9EBDAF
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforMalware
K7AntiVirusTrojan ( 0056a9881 )
BitDefenderGeneric.Application.CoinMiner.1.3BCA1021
K7GWTrojan ( 0056a9881 )
Cybereasonmalicious.ebdafe
Invinceaheuristic
CyrenW32/CoinMiner.YUOF-4693
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:Malware-gen
ClamAVWin.Coinminer.Generic-7151250-0
KasperskyHEUR:Trojan.Win32.Miner.vho
NANO-AntivirusRiskware.Win32.BtcMine.gmfedn
RisingTrojan.Miner!8.EA1 (TFE:dGZlOgXFnjeLjxuMDQ)
Ad-AwareGeneric.Application.CoinMiner.1.3BCA1021
ComodoApplication.Win32.CoinMiner.BS@8rlsid
F-SecureHeuristic.HEUR/AGEN.1133596
DrWebTool.BtcMine.2235
ZillyaTrojan.Miner.Win32.9908
TrendMicroTROJ_GEN.R06CC0DHL20
MaxSecureTrojan.Malware.121218.susgen
SophosXMRig Miner (PUA)
IkarusPUA.CoinMiner
JiangminRiskTool.BitMiner.calf
AviraHEUR/AGEN.1133596
MAXmalware (ai score=86)
Antiy-AVLTrojan/Win32.Miner
MicrosoftTrojan:Win64/CoinMiner
ArcabitGeneric.Application.CoinMiner.1.3BCA1021
ZoneAlarmHEUR:Trojan.Win32.Miner.vho
GDataWin32.Application.Coinminer.BU
CynetMalicious (score: 90)
AhnLab-V3Trojan/Win32.CoinMiner.R336602
Acronissuspicious
VBA32BScope.Trojan.Miner
MalwarebytesTrojan.BitCoinMiner
PandaTrj/Genetic.gen
ESET-NOD32a variant of Win32/CoinMiner.ES potentially unwanted
TrendMicro-HouseCallTROJ_GEN.R06CC0DHL20
TencentMalware.Win32.Gencirc.10ba432e
YandexRiskware.Agent!
SentinelOneDFI – Suspicious PE
FortinetW32/CryptoMiner.L!tr
BitDefenderThetaGen:NN.ZexaF.34186.dnKfaSjWr8ki
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Generic.Application.CoinMiner.1.3BCA1021?

Generic.Application.CoinMiner.1.3BCA1021 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment