Malware

About “Generic.LoadaRat.A.55042333” infection

Malware Removal

The Generic.LoadaRat.A.55042333 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware - Review 2020

GridinSoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend to use GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the TRIAL period.
6-day free trial available.

What Generic.LoadaRat.A.55042333 virus can do?

  • Sample contains Overlay data
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Reads data out of its own binary image
  • Authenticode signature is invalid
  • Detects Bochs through the presence of a registry key
  • Checks the version of Bios, possibly for anti-virtualization
  • Attempted to write directly to a physical drive
  • Creates a copy of itself
  • Collects information to fingerprint the system
  • Anomalous binary characteristics

How to determine Generic.LoadaRat.A.55042333?


File Info:

name: 810C960E21BE431BE3F8.mlw
path: /opt/CAPEv2/storage/binaries/e807fcd2fed5ce217b8aeaf678d1156abb8dd312f14b246e9729d542804c2c5e
crc32: C1494026
md5: 810c960e21be431be3f84f12a7675db6
sha1: e9455cf6c9e29fbe586c1be389179bcfd0d8c594
sha256: e807fcd2fed5ce217b8aeaf678d1156abb8dd312f14b246e9729d542804c2c5e
sha512: 72734519dc204d3ea7a86a84249c10b04437096f375c84934577d9bf86955f0908f6e1486b285c75b435d70c18596ba2373bb1831d795f103429da8ed930149b
ssdeep: 24576:0RmJkcoQricOIQxiZY1iacIKgUYKSXKhyP/Vu:RJZoQrbTFZY1iaLKga1kP/o
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T13A35E122B9D58036C2B323B19E7EF76A963D79360336D29B37C81D315EA05416B29733
sha3_384: 3b83f7aa42e36960c586ffc6f920ca66676085d03d95b80f90e13009eb3efa171cface62b75989c10432e44373cc4c83
ep_bytes: e816900000e989feffffcccccccccc55
timestamp: 2012-01-29 21:32:28

Version Info:

FileDescription:
FileVersion: 3, 3, 8, 1
CompiledScript: AutoIt v3 Script: 3, 3, 8, 1
Translation: 0x0809 0x04b0

Generic.LoadaRat.A.55042333 also known as:

BkavW32.AIDetect.malware2
tehtrisGeneric.Malware
MicroWorld-eScanGeneric.LoadaRat.A.55042333
ClamAVTxt.Malware.LodaRAT-9769386-0
FireEyeGeneric.mg.810c960e21be431b
ALYacGeneric.LoadaRat.A.55042333
CylanceUnsafe
SangforTrojan.Win32.Save.a
Cybereasonmalicious.e21be4
CyrenW32/AutoIt.SJ.gen!Eldorado
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Autoit.EJ
APEXMalicious
CynetMalicious (score: 100)
KasperskyHEUR:Backdoor.Script.LodaRat.a
BitDefenderGeneric.LoadaRat.A.55042333
AvastAutoIt:KeyLogger-R [Trj]
Ad-AwareGeneric.LoadaRat.A.55042333
SophosGeneric ML PUA (PUA)
VIPREGeneric.LoadaRat.A.55042333
McAfee-GW-EditionBehavesLike.Win32.Dropper.tc
Trapminemalicious.moderate.ml.score
EmsisoftGeneric.LoadaRat.A.55042333 (B)
GDataGeneric.LoadaRat.A.55042333 (2x)
AviraHEUR/AGEN.1229437
Antiy-AVLTrojan/Generic.ASBOL.C6D6
ArcabitGeneric.LoadaRat.A.D347E11D
ZoneAlarmHEUR:Backdoor.Script.LodaRat.a
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
GoogleDetected
Acronissuspicious
McAfeeTrojan-AutoIt.g
MAXmalware (ai score=82)
VBA32Trojan.Autoit.F
RisingBackdoor.888Rat/Autoit!1.C8E3 (CLASSIC)
IkarusTrojan.Autoit
MaxSecureTrojan.Autoit.AZA
FortinetAutoIt/Agent.DB!tr
BitDefenderThetaAI:Packer.1D0DF3E616
AVGAutoIt:KeyLogger-R [Trj]
CrowdStrikewin/malicious_confidence_90% (D)

How to remove Generic.LoadaRat.A.55042333?

Generic.LoadaRat.A.55042333 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment