Malware

Generic.DataStealer.1.09C80696 (file analysis)

Malware Removal

The Generic.DataStealer.1.09C80696 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.DataStealer.1.09C80696 virus can do?

  • Reads data out of its own binary image
  • Drops a binary and executes it
  • Unconventionial language used in binary resources: Russian
  • The binary likely contains encrypted or compressed data.
  • Attempts to repeatedly call a single API many times in order to delay analysis time
  • Network activity detected but not expressed in API logs

How to determine Generic.DataStealer.1.09C80696?


File Info:

crc32: BC6FB614
md5: bb8bbf5ba2f109d7edd641a045d2c75d
name: BB8BBF5BA2F109D7EDD641A045D2C75D.mlw
sha1: d1a58d1ad1314b65b7f384b252758b0a7f01b080
sha256: 7502f8014a0a81eac988bf249bd37469c14f423a350c02aa8366149558a239fa
sha512: 6cbfc42391fe05d24020c549a6e5000b6ba32e673b256aaf060aa2f1bec9914d892c4943cbf6e167a91a5695b7c0b5a4d8d9209048d430c6db8280eafef8a4f4
ssdeep: 12288:5RZ+IoG/n9IQxW3OBseNyXgUGfR9viJxSIWH6AAx+tGwboFNor1GCdvG:R2G/nvxW3W2QZfR9aJoIWHmZK0NoXNG
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Generic.DataStealer.1.09C80696 also known as:

BkavW32.AIDetect.malware1
Elasticmalicious (high confidence)
DrWebTrojan.PWS.StealerNET.76
CynetMalicious (score: 100)
CAT-QuickHealTrojanpws.Msil
ALYacGeneric.DataStealer.1.09C80696
ZillyaTrojan.ScriptKD.JS.10
CrowdStrikewin/malicious_confidence_80% (W)
Cybereasonmalicious.ba2f10
CyrenW32/MSIL_Agent.BSF.gen!Eldorado
SymantecTrojan.Gen.MBT
ESET-NOD32a variant of MSIL/PSW.Agent.RML
APEXMalicious
AvastWin32:MalwareX-gen [Trj]
KasperskyHEUR:Trojan-PSW.MSIL.Agensla.gen
BitDefenderGeneric.DataStealer.1.09C80696
MicroWorld-eScanGeneric.DataStealer.1.09C80696
SophosML/PE-A
TrendMicroTROJ_GEN.R002C0GE921
McAfee-GW-EditionBehavesLike.Win32.Lockbit.jc
FireEyeGeneric.mg.bb8bbf5ba2f109d7
EmsisoftGeneric.DataStealer.1.09C80696 (B)
SentinelOneStatic AI – Malicious SFX
AviraTR/PSW.Agent.ltgds
Antiy-AVLTrojan/Generic.ASMalwS.3227EDB
MicrosoftTrojan:Win32/Wacatac.B!ml
GDataGeneric.DataStealer.1.09C80696
McAfeeArtemis!BB8BBF5BA2F1
MAXmalware (ai score=87)
VBA32TScope.Trojan.MSIL
MalwarebytesSpyware.PasswordStealer.44
TrendMicro-HouseCallTROJ_GEN.R005H0CE821
RisingStealer.Agent!1.D483 (CLOUD)
YandexTrojan.PWS.Agent!kM6nlnUknU0
IkarusTrojan.MSIL.Spy
FortinetMSIL/Agent.RML!tr
AVGWin32:MalwareX-gen [Trj]

How to remove Generic.DataStealer.1.09C80696?

Generic.DataStealer.1.09C80696 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment