Categories: Malware

About “Generic.AsyncRAT.Marte.B.F14FDB8A” infection

The Generic.AsyncRAT.Marte.B.F14FDB8A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.AsyncRAT.Marte.B.F14FDB8A virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid
CAPE detected the AsyncRat malware family
Binary file triggered YARA rule

How to determine Generic.AsyncRAT.Marte.B.F14FDB8A?


File Info:
name: 8DEEBB55E0E8489661B4.mlwpath: /opt/CAPEv2/storage/binaries/f04d4172a5edc78e194906e2e12b235d350f392bacec0dd91f6ca78a24ee0f80crc32: 897D88A7md5: 8deebb55e0e8489661b446fd204d3267sha1: 8691bb16ed5429bf1bcb16d4d535ee2a8ca6db43sha256: f04d4172a5edc78e194906e2e12b235d350f392bacec0dd91f6ca78a24ee0f80sha512: 07d46930b4af50dfdc073213d900b722bdb41f9af5edd3bf5a19abcc5c60d43ecc0c388a377f65a89403bdd3a0ca2c5016555b46f096b497445eabeedf4a5da5ssdeep: 768:8u8U1TPJosp/WUTvS9mo2qzaKjrGagAWJzjbtgX3iocho6/6pcDZPv+:8u8U1TPJnG2bKHKTJ3b6XSTho+ddPv+type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T17E232C003BE98127F2BE4FB898F26145467AF2637603D64E1CC451DB5613FC69A42AFEsha3_384: ee3741eecbc3c2b4ac1065c12bc88230bd981d86562ee66bf130393dca42d49584eac34d5ccc09e980dc3cb9a9731308ep_bytes: ff250020400000000000000000000000timestamp: 2023-01-14 19:44:59
Version Info:
Translation: 0x0000 0x04b0Comments: CompanyName: Microsoft CorporationFileDescription: Runtime BrokerFileVersion: 6.2.19041.746InternalName: RuntimeBroker.exeLegalCopyright: © Microsoft Corporation. All rights reserved.LegalTrademarks: OriginalFilename: RuntimeBroker.exeProductName: Microsoft® Windows® Operating SystemProductVersion: 6.2.19041.746Assembly Version: 6.2.19041.746

Generic.AsyncRAT.Marte.B.F14FDB8A also known as:

Bkav	W32.AIDetectMalware.CS
Elastic	Windows.Generic.Threat
MicroWorld-eScan	Generic.AsyncRAT.Marte.B.F14FDB8A
FireEye	Generic.mg.8deebb55e0e84896
CAT-QuickHeal	Trojan.IgenericFC.S14890850
Skyhigh	BehavesLike.Win32.Fareit.pm
ALYac	Generic.AsyncRAT.Marte.B.F14FDB8A
Cylance	unsafe
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Trojan ( 005678321 )
Alibaba	Backdoor:MSIL/AsyncRat.d5c61e3c
K7GW	Trojan ( 005678321 )
BitDefenderTheta	Gen:NN.ZemsilF.36802.cm0@a4m8Spj
VirIT	Trojan.Win32.MSIL_Heur.A
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/AsyncRAT.A
APEX	Malicious
ClamAV	Win.Packed.Razy-9625918-0
Kaspersky	HEUR:Backdoor.MSIL.Crysan.gen
BitDefender	Generic.AsyncRAT.Marte.B.F14FDB8A
NANO-Antivirus	Trojan.Win32.Razy.jukjgo
Tencent	Trojan.Msil.Agent.zap
Sophos	Troj/AsyncRat-B
F-Secure	Heuristic.HEUR/AGEN.1305744
DrWeb	Trojan.Siggen9.56514
VIPRE	Generic.AsyncRAT.Marte.B.F14FDB8A
TrendMicro	Backdoor.MSIL.ASYNCRAT.SMXSR
Emsisoft	Generic.AsyncRAT.Marte.B.F14FDB8A (B)
SentinelOne	Static AI – Malicious PE
GData	MSIL.Backdoor.DCRat.D
Google	Detected
Avira	HEUR/AGEN.1305744
Varist	W32/Samas.B.gen!Eldorado
Antiy-AVL	Trojan[Backdoor]/MSIL.Crysan
Kingsoft	win32.hack.undef.a
Arcabit	Generic.AsyncRAT.Marte.B.F14FDB8A
ZoneAlarm	HEUR:Backdoor.MSIL.Crysan.gen
Microsoft	Backdoor:MSIL/AsyncRat.AD!MTB
AhnLab-V3	Malware/Win32.RL_Generic.C4267562
McAfee	Fareit-FZT!8DEEBB55E0E8
MAX	malware (ai score=82)
DeepInstinct	MALICIOUS
VBA32	OScope.Backdoor.MSIL.Crysan
Malwarebytes	Generic.Malware.AI.DDS
Rising	Trojan.AntiVM!1.CF63 (CLASSIC)
Ikarus	Backdoor.AsyncRat
Fortinet	MSIL/Agent.CFQ!tr
Panda	Trj/GdSda.A
alibabacloud	Backdoor[rat]:MSIL/Agenttesla.Stub.LQL!MTB