Categories: Malware

Generic.Mulinex.C9D95C3D (file analysis)

The Generic.Mulinex.C9D95C3D is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.Mulinex.C9D95C3D virus can do?

Executable code extraction
Creates RWX memory
Expresses interest in specific running processes
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
A scripting utility was executed
Uses Windows utilities for basic functionality
A process attempted to delay the analysis task by a long amount of time.
Empties the Recycle Bin, indicative of ransomware
Uses suspicious command line tools or Windows utilities

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Generic.Mulinex.C9D95C3D?


File Info:
crc32: D6345BA0md5: f0577a48d5f9ec267b2a3d77e56932aaname: SQLAGENTIDC.exesha1: c8cfe680e6f4fa1266764845f102af2897aa8933sha256: f273ff2db2c8e073a050ddd3c6c564f6dd67c669a30f20a83b973c44e27ae657sha512: a0342661d08c6b9e04bb3e51098b5eb729834123ff252ceb79ad85b6fb6e955b77de54b9af36d291aebf0d4d4f05ebcd95953593fd635aa88dad180e967e4867ssdeep: 12288:AAsjmBQyLmzkOlzPvm0Ad2X9l2QL5Lag+VcKYwU15vNO7l:AHjYmzkS7Nl245mg+owmNO7ltype: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
Version Info:
LegalCopyright: Copyright (C) 2015 CHINA CITIC BANK.InternalName: update.exeFileVersion: 1.2.0.0720CompanyName: x4e2dx4fe1x94f6x884cComments: x4e2dx4fe1x94f6x884cx7f51x94f6x4f34x4fa3ProductName: update.exeProductVersion: 1.2.0.0720FileDescription: x7f51x94f6x4f34x4fa3x5347x7ea7x7a0bx5e8fOriginalFilename: update.exeTranslation: 0x0804 0x03a8

Generic.Mulinex.C9D95C3D also known as:

Bkav	W32.AIDetectVM.malware2
DrWeb	Trojan.BtcMine.3404
MicroWorld-eScan	Generic.Mulinex.C9D95C3D
FireEye	Generic.mg.f0577a48d5f9ec26
CAT-QuickHeal	PUA.BitminRI.S9338387
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
K7AntiVirus	Trojan ( 00561c1b1 )
BitDefender	Generic.Mulinex.C9D95C3D
K7GW	Trojan ( 00561c1b1 )
Cybereason	malicious.8d5f9e
Arcabit	Generic.Mulinex.C9D95C3D
Invincea	heuristic
BitDefenderTheta	Gen:NN.ZexaF.34100.HmKfaW@77Vhj
F-Prot	W32/Trojan.CLL.gen!Eldorado
Symantec	Miner.XMRig
APEX	Malicious
ClamAV	Win.Malware.Midie-7357494-0
GData	Generic.Mulinex.C9D95C3D
Kaspersky	Trojan-Downloader.Win32.Bitmin.xwy
Rising	Backdoor.Agent!1.B7E4 (RDMK:cmRtazrJjHMYpbCGO/JZDyHpOyxa)
Ad-Aware	Generic.Mulinex.C9D95C3D
Sophos	Troj/Agent-BCPO
F-Secure	Heuristic.HEUR/AGEN.1046199
Zillya	Trojan.CoinMiner.Win32.25455
Trapmine	malicious.high.ml.score
Emsisoft	Generic.Mulinex.C9D95C3D (B)
Ikarus	Trojan.Win32.CoinMiner
Cyren	W32/Trojan.CLL.gen!Eldorado
Jiangmin	TrojanDownloader.Bitmin.mz
eGambit	Unsafe.AI_Score_99%
Avira	HEUR/AGEN.1046199
MAX	malware (ai score=89)
Antiy-AVL	Trojan[Downloader]/Win32.Upatre
Microsoft	Trojan:Win32/Coinminer.PA!MTB
Endgame	malicious (moderate confidence)
ZoneAlarm	Trojan-Downloader.Win32.Bitmin.xwy
AhnLab-V3	Malware/Win32.RL_Coinminer.R328898
Acronis	suspicious
VBA32	BScope.Trojan.CMY3U
ALYac	Generic.Mulinex.C9D95C3D
Malwarebytes	RiskWare.BitCoinMiner
ESET-NOD32	a variant of Win32/CoinMiner.BUF
Yandex	Trojan.CoinMiner!aW1qAi1rDo4
SentinelOne	DFI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/QQWare.A!tr
Webroot	W32.Malware.Gen
AVG	Win32:CoinMiner-M [Trj]
Panda	Trj/GdSda.A
CrowdStrike	win/malicious_confidence_80% (D)