Malware

Generic.Application.CoinMiner.1.D240515A (file analysis)

Malware Removal

The Generic.Application.CoinMiner.1.D240515A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.Application.CoinMiner.1.D240515A virus can do?

  • Possible date expiration check, exits too soon after checking local time
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Generic.Application.CoinMiner.1.D240515A?


File Info:

crc32: DC50D5A6
md5: 7d8bfc9dccf52d52271e66c0e81b964c
name: upload_file
sha1: 77edfa96b6d01a18a25d4006a02201d81c3c2bac
sha256: 67778c181b26f80fa1d0bc988a8b849d448bfb322fd54b033a06f74238bf9733
sha512: d5d76af8d4c9d21edfd40c45ff0dac3e13997f810b19e382f77a5b30ad0e22846ef2707b582e8bc2691d73cb505f9800c92876e2ec4f01a5e1693b5fffc6ef0c
ssdeep: 24576:0RBrzwX0YmJI8DRnCD4jtnT8Q1r0ly78ipwR7O:OJzdnm4lT8Q1r0pieR7
type: PE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows, UPX compressed

Version Info:

LegalCopyright: Copyright xa9 2002 - 2017 Nir Sofer
InternalName: IECookiesView
FileVersion: 1.79
CompanyName: NirSoft
ProductName: IECookiesView
ProductVersion: 1.79
FileDescription: IECookiesView
OriginalFilename: iecv.exe
Translation: 0x0409 0x04b0

Generic.Application.CoinMiner.1.D240515A also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanGeneric.Application.CoinMiner.1.D240515A
FireEyeGeneric.mg.7d8bfc9dccf52d52
CAT-QuickHealPUA.CoinminerPMF.S9547169
MalwarebytesTrojan.BitCoinMiner
VIPRETrojan.Win32.Generic!BT
SangforMalware
BitDefenderGeneric.Application.CoinMiner.1.D240515A
BitDefenderThetaGen:NN.ZexaCO.34570.dnKfam6RlXci
CyrenW32/CoinMiner.YUOF-4693
SymantecML.Attribute.HighConfidence
APEXMalicious
Paloaltogeneric.ml
ClamAVWin.Coinminer.Generic-7151250-0
KasperskyTrojan.Win32.Miner.asyao
NANO-AntivirusRiskware.Win32.BtcMine.gmfedn
RisingTrojan.Miner!8.EA1 (TFE:5:1SNaNiR6GKB)
Ad-AwareGeneric.Application.CoinMiner.1.D240515A
SophosXMRig Miner (PUA)
ComodoApplication.Win32.CoinMiner.BS@8rlsid
F-SecureHeuristic.HEUR/AGEN.1133596
DrWebTool.BtcMine.2235
ZillyaTrojan.Miner.Win32.9908
InvinceaXMRig Miner (PUA)
McAfee-GW-EditionBehavesLike.Win32.Generic.tc
EmsisoftGeneric.Application.CoinMiner.1.D240515A (B)
JiangminRiskTool.BitMiner.calf
AviraHEUR/AGEN.1133596
Antiy-AVLTrojan/Win32.Miner
MicrosoftTrojan:Win64/CoinMiner
ArcabitGeneric.Application.CoinMiner.1.D240515A
ZoneAlarmTrojan.Win32.Miner.asyao
GDataWin32.Application.Coinminer.BU
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.CoinMiner.R352663
Acronissuspicious
McAfeeGenericRXAA-AA!7D8BFC9DCCF5
VBA32BScope.Trojan.Miner
ESET-NOD32a variant of Win32/CoinMiner.ES potentially unwanted
TencentMalware.Win32.Gencirc.10ce08a2
MAXmalware (ai score=81)
FortinetW32/CryptoMiner.L!tr
AVGWin32:Evo-gen [Susp]
Cybereasonmalicious.dccf52
PandaTrj/Genetic.gen

How to remove Generic.Application.CoinMiner.1.D240515A?

Generic.Application.CoinMiner.1.D240515A removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment