Generic.Malware.SLc!dld!.DB9EDEFA (file analysis)

The Generic.Malware.SLc!dld!.DB9EDEFA is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.Malware.SLc!dld!.DB9EDEFA virus can do?

• CAPE extracted potentially suspicious content
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• The executable is compressed using UPX
• Authenticode signature is invalid
• Behavioural detection: Injection (inter-process)
• Behavioural detection: Injection with CreateRemoteThread in a remote process
• CAPE detected the Xtreme malware family
• Attempts to modify proxy settings
• CAPE detected injection into a browser process, likely for Man-In-Browser (MITB) infostealing
• Creates a copy of itself
• Touches a file containing cookies, possibly for information gathering
• Creates known XtremeRAT mutexes
• Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Generic.Malware.SLc!dld!.DB9EDEFA?

File Info:
name: E47FCD045D85A116F66C.mlw
path: /opt/CAPEv2/storage/binaries/78d17f71835091df590823e2b17aab0ecbc83b13569cf4ff26fd8ef0843ba89b
crc32: 69748DDB
md5: e47fcd045d85a116f66c2589b45bf7f1
sha1: 9c03d04dad6da7fd83db0e28d3f06b94ffc56a98
sha256: 78d17f71835091df590823e2b17aab0ecbc83b13569cf4ff26fd8ef0843ba89b
sha512: 5848b3ce647678ff37e116d451b4f2c5abbc77a6ec3dd4809a7b54607fdbdc312f989c111c4ea3614b742cbfb8f8a19bdeaa380e14a3fe81e3ab8f5fbcecc539
ssdeep: 384:uHKZfuH87GowDqGoMwevqxP6k6zIDwPVBSQZ4P0E177R:zZfuHUvwDKP6kMp7ZePJ
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1A792E1B37A538DA3D8A18FF5524AD146372464344AFD47AC5F21270FBC370312BA259E
sha3_384: 78286d04503a71a3c0fd3ab51a0c7402017a14d2d69205bf034c09c9fc16d827a5d8cfa7370dfe6b89e67ed552c43f7b
ep_bytes: 60be00f0c8008dbe0020ffff57eb0b90
timestamp: 1992-06-19 22:22:17

Version Info:
0: [No Data]

Generic.Malware.SLc!dld!.DB9EDEFA also known as:

How to remove Generic.Malware.SLc!dld!.DB9EDEFA?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.