Categories: Malware

Generic.ShellCode.Marte.2.0ED8363E removal

The Generic.ShellCode.Marte.2.0ED8363E is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.ShellCode.Marte.2.0ED8363E virus can do?

Sample contains Overlay data
Authenticode signature is invalid
CAPE detected the shellcode get eip malware family
Binary file triggered YARA rule
Anomalous binary characteristics
Yara detections observed in process dumps, payloads or dropped files

How to determine Generic.ShellCode.Marte.2.0ED8363E?


File Info:
name: 4DF5323CFAD326553E35.mlwpath: /opt/CAPEv2/storage/binaries/4d7efc08b9bf25b144199aeeb9a6d19a13a9cba2bab6a8dff02dbc98161de925crc32: 00FE439Fmd5: 4df5323cfad326553e35f561f50f4cf5sha1: 37cf835a28c075adb588d1a7f365991024b5fb6bsha256: 4d7efc08b9bf25b144199aeeb9a6d19a13a9cba2bab6a8dff02dbc98161de925sha512: 52ff2c817476ea3b96266d701b71da3aa212aff730c38cd8e1716c5b4312c1771e297f1570c66b8dadef6b792f4b3bca72359dbc266eb88d455984fdb6879b50ssdeep: 3072:fEWtqDIfB+hbjNeaWyTVq7yIZ3M529kEYu1S0vfxQqFl3fIZ0cpqhgNwDjW2BM9:sAqsfqAud4Yu1SMn3f5UwDjpOtype: PE32 executable (DLL) (GUI) Intel 80386, for MS Windowstlsh: T1E7148E12B8818072C5BF5A3446B79B620EBD7C600B759DEB47AC5CA90F381C2D735B6Bsha3_384: 7e3a04b06086b6341e4c62246b269602582ed03131949305226d6cc5ede5a8436a248c5cf6f99e047c8ac624f6f04799ep_bytes: 558bec837d0c017505e862000000ff75timestamp: 2023-07-01 04:21:51
Version Info:
0: [No Data]

Generic.ShellCode.Marte.2.0ED8363E also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Diple.4!c
MicroWorld-eScan	Generic.ShellCode.Marte.2.0ED8363E
Cylance	unsafe
Zillya	Tool.Meterpreter.Win32.1116
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Riskware ( 005678921 )
K7GW	Riskware ( 005678921 )
CrowdStrike	win/malicious_confidence_100% (D)
BitDefenderTheta	Gen:NN.ZedlaF.36802.mq5@aOhHFud
Symantec	ML.Attribute.HighConfidence
Elastic	Windows.Trojan.Metasploit
ESET-NOD32	a variant of Win32/RiskWare.Meterpreter.Agent.G
APEX	Malicious
ClamAV	Win.Exploit.D388a-9756522-0
Kaspersky	HEUR:Trojan.Win32.Diple.vho
BitDefender	Generic.ShellCode.Marte.2.0ED8363E
NANO-Antivirus	Trojan.Win32.Diple.jyfowl
Avast	Win32:MsfShell-H [Trj]
Tencent	Trojan.Win32.Metasploit_heur.16000691
Emsisoft	Generic.ShellCode.Marte.2.0ED8363E (B)
F-Secure	Trojan.TR/Dropper.Gen2
VIPRE	Generic.ShellCode.Marte.2.0ED8363E
Trapmine	suspicious.low.ml.score
FireEye	Generic.mg.4df5323cfad32655
Sophos	Mal/Swrort-Y
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.Diple.ccmp
ALYac	Generic.ShellCode.Marte.2.0ED8363E
Varist	W32/S-d8e6a0ba!Eldorado
Avira	TR/Dropper.Gen2
Antiy-AVL	Trojan/Win32.Diple.vho
Kingsoft	malware.kb.a.998
Microsoft	HackTool:Win32/Meterpreter.A!dll
Arcabit	Generic.ShellCode.Marte.2.0ED8363E
ZoneAlarm	HEUR:Trojan.Win32.Diple.vho
GData	Win32.Malware.Rozena.F
Cynet	Malicious (score: 100)
AhnLab-V3	HackTool/Win.Meterpreter.R578377
VBA32	Trojan.Diple
Google	Detected
MAX	malware (ai score=82)
Malwarebytes	Generic.Malware.AI.DDS
Panda	Trj/Genetic.gen
Rising	Trojan.ShellCode!1.C856 (CLASSIC)
Yandex	Trojan.Diple!DpV3qwlzP8w
Ikarus	PUA.RiskWare.Meterpreter
MaxSecure	Poly.Worm.Kido
Fortinet	W32/Swrort.Y!tr
AVG	Win32:MsfShell-H [Trj]
DeepInstinct	MALICIOUS
alibabacloud	Exp:Multi/Meterpreter