Malware

Should I remove “Generic.Mulinex.010221B5”?

Malware Removal

The Generic.Mulinex.010221B5 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Generic.Mulinex.010221B5 virus can do?

  • At least one process apparently crashed during execution
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Presents an Authenticode digital signature
  • Dynamic (imported) function loading detected
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX
  • Authenticode signature is invalid

How to determine Generic.Mulinex.010221B5?



File Info:

name: 5781C9B847C96EF7369B.mlw
path: /opt/CAPEv2/storage/binaries/a66f1f4e5090112157277d66d13d22868bcf5c07904aa83c10185b02c47269dd
crc32: 48FB287A
md5: 5781c9b847c96ef7369b9e555ae6b814
sha1: 68775d6ca7502499a7bdd15a8e17c3b5b4599a22
sha256: a66f1f4e5090112157277d66d13d22868bcf5c07904aa83c10185b02c47269dd
sha512: 40ceb8bd036d70609ba44f25afd3d42b2405dee736f63bfcd9160b817093d0d064d30d0b7931d3fb177ac24a8cba857d058699eb80128a7c41d86add99ad0a78
ssdeep: 12288:mg0kk4Mqqi4XuuJwtPslNP38wwio8hWs8qaOG7xw:t0qoRwtEz8wfo8LaOGdw
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T163C4121F261494A1D88C8C30C9A78AB96E24FD52CD416A8FFAB47F4E3D367C0B11658F
sha3_384: 61b43ed67dd9d0bd4756df372b96276b424a1f7ff66c3511250ca83254732acc0bd7a93f295ef66a8f358d3c8c65d938
ep_bytes: 60be00604d008dbe00b0f2ff5783cdff
timestamp: 2021-12-10 19:21:15


Version Info:

CompanyName: Babylon Software Ltd.
FileDescription: Babylon Setup SE
FileVersion: 10.1.0.0
InternalName: Setup Stub
LegalCopyright: Copyright © Babylon Software Ltd. 1997-2016
OriginalFilename: SetupStub.exe
ProductName: Babylon Setup
ProductVersion: 10.1.0.0
Translation: 0x0409 0x04b0

Generic.Mulinex.010221B5 also known as:

Elasticmalicious (high confidence)
MicroWorld-eScanGeneric.Mulinex.010221B5
FireEyeGeneric.mg.5781c9b847c96ef7
CAT-QuickHealPUA.BitminRI.S9338387
MalwarebytesRiskWare.BitCoinMiner
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 005246d51 )
K7GWTrojan ( 005246d51 )
Cybereasonmalicious.847c96
BitDefenderThetaGen:NN.ZexaF.34084.ImLfaWyYupnj
CyrenW32/Trojan.CLL.gen!Eldorado
SymantecMiner.XMRig
ESET-NOD32a variant of Win32/CoinMiner.BUF
AvastWin32:CoinMiner-M [Trj]
ClamAVMultios.Coinminer.Miner-6781728-2
Kasperskynot-a-virus:HEUR:RiskTool.Win32.BitMiner.gen
BitDefenderGeneric.Mulinex.010221B5
Ad-AwareGeneric.Mulinex.010221B5
ComodoTrojWare.Win32.Agent.OSCF@5rs7jr
BaiduWin32.Trojan.Farfli.e
EmsisoftGeneric.Mulinex.010221B5 (B)
JiangminTrojan.Miner.mmk
AviraHEUR/AGEN.1136186
Antiy-AVLTrojan/Generic.ASCommon.FA
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
GDataWin32.Trojan.PSE.12FI8JT
CynetMalicious (score: 100)
Acronissuspicious
ALYacGeneric.Mulinex.010221B5
MAXmalware (ai score=84)
VBA32BScope.Backdoor.Poison
APEXMalicious
RisingMalware.Heuristic!ET#98% (RDMK:cmRtazoh3vev46Q77jxh0mKmVmVa)
YandexTrojan.GenAsa!CnhHeVv4fes
SentinelOneStatic AI – Malicious PE
eGambitUnsafe.AI_Score_99%
FortinetW32/CoinMiner.ELG!tr.pws
AVGWin32:CoinMiner-M [Trj]
PandaTrj/Genetic.gen

How to remove Generic.Mulinex.010221B5?

Generic.Mulinex.010221B5 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment