Categories: Malware

Generic.Mulinex.247D179F removal

The Generic.Mulinex.247D179F is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.Mulinex.247D179F virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Behavioural detection: Executable code extraction – unpacking
Yara rule detections observed from a process memory dump/dropped files/CAPE
Presents an Authenticode digital signature
Creates RWX memory
Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Unconventionial language used in binary resources: Chinese (Simplified)
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Authenticode signature is invalid

How to determine Generic.Mulinex.247D179F?


File Info:
name: 03ED16F324EB4C35B3B0.mlwpath: /opt/CAPEv2/storage/binaries/3fc16499c342085795d7e3b62f70439a70bc83aa306999dc29751c46d6af556ecrc32: 99439BA3md5: 03ed16f324eb4c35b3b07421775f913csha1: 8cba155e74d399369fbe3cac393a00ef2b62812bsha256: 3fc16499c342085795d7e3b62f70439a70bc83aa306999dc29751c46d6af556esha512: f5e1360353f2168aa9db7ad7dfaa36de0b63be17ff7ddf9796c9947b7a97474b8400a575c3ac3abb26dfb7f4e68b5f06940ae4a7feb4c8814051a7a8da9170ddssdeep: 12288:noZt7UExwRslNP38wwio8hWwdPtDMUVZQ0Mn:yB+Wz8wfo8vdFpHQ0Mntype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T104C4120B3595C067E52C4C308B835BFA9F55AE518D464B0FBAB0BF8EBD71380B52539Asha3_384: c779cd9bb57fc8608d2ce29af753b09a53c8b7ab7fdb5eb3078230002c343114f78fa0b088d56508974640abf30fe842ep_bytes: 60be00b04d008dbe0060f2ff5783cdfftimestamp: 2021-12-28 18:38:54
Version Info:
CompanyName: Microsoft CorporationFileDescription: Depuración del programa de instalación de Microsoft DirectXFileVersion: 4.9.0.0904InternalName: dxsetup.exeLegalCopyright: Copyright © Microsoft Corporation. Reservados todos los derechos.OriginalFilename: dxsetup.exeProductName: Microsoft® DirectX para Windows®ProductVersion: 4.9.0.0904Translation: 0x040a 0x04b0

Generic.Mulinex.247D179F also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
DrWeb	Trojan.Fakealert.59687
MicroWorld-eScan	Generic.Mulinex.247D179F
CAT-QuickHeal	PUA.BitminRI.S9338387
McAfee	GenericRXAA-AA!03ED16F324EB
Cylance	Unsafe
Zillya	Trojan.CoinMiner.Win32.41696
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 005246d51 )
K7GW	Trojan ( 005246d51 )
Cybereason	malicious.324eb4
BitDefenderTheta	Gen:NN.ZexaF.34182.JmLfaWt6iWpb
Cyren	W32/Trojan.CLL.gen!Eldorado
Symantec	Miner.XMRig
ESET-NOD32	a variant of Win32/CoinMiner.BUF
ClamAV	Multios.Coinminer.Miner-6781728-2
Kaspersky	HEUR:Trojan.Win32.Miner.gen
BitDefender	Generic.Mulinex.247D179F
Avast	Win32:CoinMiner-M [Trj]
Sophos	ML/PE-A + Troj/Agent-BCPO
Comodo	TrojWare.Win32.Agent.OSCF@5rs7jr
Baidu	Win32.Trojan.Farfli.e
McAfee-GW-Edition	Trojan-FUEG!0ADD3F73A7DC
FireEye	Generic.mg.03ed16f324eb4c35
Emsisoft	Generic.Mulinex.247D179F (B)
Ikarus	Trojan.Win32.CoinMiner
Jiangmin	Trojan.Sasfis.tq
Avira	HEUR/AGEN.1200814
Antiy-AVL	Trojan/Win32.FlyStudio.a
Microsoft	Trojan:Script/Phonzy.B!ml
GData	Win32.Trojan.PSE.5LSHNI
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win32.RL_Generic.R352067
VBA32	BScope.Trojan.Dynamer
ALYac	Generic.Mulinex.247D179F
MAX	malware (ai score=80)
Malwarebytes	RiskWare.BitCoinMiner
APEX	Malicious
Rising	Backdoor.Agent!1.B7E4 (RDMK:cmRtazpcd8tbEBcVnBczpckbwhoU)
Yandex	Trojan.Miner!YaRwrx+iOqs
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/CoinMiner.ELG!tr.pws
AVG	Win32:CoinMiner-M [Trj]
Panda	Trj/GdSda.A
CrowdStrike	win/malicious_confidence_60% (D)