What is “Generic.ShellCode.Marte.2.870F04F1”?

The Generic.ShellCode.Marte.2.870F04F1 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Generic.ShellCode.Marte.2.870F04F1 virus can do?

Authenticode signature is invalid

How to determine Generic.ShellCode.Marte.2.870F04F1?


File Info:
name: 71CF890F7AD8EB04F1C8.mlw
path: /opt/CAPEv2/storage/binaries/92f1f9d1b95e7e931650a6fa0c53948bef04d5e389ed59b5f6608c7fcd0afdb5
crc32: 3977A3CC
md5: 71cf890f7ad8eb04f1c806220efd62ff
sha1: 4f335853c243c2b1a1d38efc8f752dce67bc29d7
sha256: 92f1f9d1b95e7e931650a6fa0c53948bef04d5e389ed59b5f6608c7fcd0afdb5
sha512: 2e7b11fbe0620f8ecef87cae94839f2a113340f9ffec38da58f2f2fd07ef4cfde0eefc612e1a73d22a2f8eb1cdd7cfbdf3f5abe612d3aa1b773fe624cac4c27e
ssdeep: 192:V6gBwpo43W+tUptS1mGoTLxnfDBaKtcKYqm8S35/xf002CM9K/3:V6/f6ptsmGeDQKnXq5ZMVCbP
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T10E624B97F9017072D252BEB049E9DBBAC73BB8224C834A3AFF65BB8C7521580A911147
sha3_384: 3a6dd29f3dc38a1381e0d236b9494629a990bf0ee2ee5ed051e917b24f75564ee500d0471cb6f4f69dca484e7004e891
ep_bytes: c7056460400000000000e961fdffff90
timestamp: 2023-10-10 14:25:46

Version Info:
0: [No Data]

Generic.ShellCode.Marte.2.870F04F1 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.4!c
MicroWorld-eScan	Generic.ShellCode.Marte.2.870F04F1
FireEye	Generic.ShellCode.Marte.2.870F04F1
Skyhigh	RDN/Generic BackDoor
McAfee	RDN/Generic BackDoor
Malwarebytes	Trojan.ShellCode
Zillya	Trojan.Rozena.Win32.204163
Sangfor	HackTool.Win32.Httpstager64_Bin_v3_2_through_v4_x.uwccg
K7AntiVirus	Trojan ( 005959301 )
Alibaba	Trojan:Win32/CobaltStrike.5f11
K7GW	Trojan ( 005959301 )
Arcabit	Generic.ShellCode.Marte.2.870F04F1
Symantec	Backdoor.Cobalt!gm5
Elastic	Windows.Trojan.Metasploit
ESET-NOD32	a variant of Win32/Rozena.BLY
Cynet	Malicious (score: 100)
APEX	Malicious
ClamAV	Win.Trojan.MSShellcode-5
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Generic.ShellCode.Marte.2.870F04F1
NANO-Antivirus	Trojan.Win32.Rozena.kcexny
Avast	Win32:MsfShell-V [Hack]
Tencent	Trojan.Win32.Metasploit_heur.16000691
Emsisoft	Generic.ShellCode.Marte.2.870F04F1 (B)
F-Secure	Trojan.TR/Rozena.oahcn
VIPRE	Generic.ShellCode.Marte.2.870F04F1
TrendMicro	Backdoor.Win32.COBEACON.YXDJRZ
Sophos	Mal/Generic-S
SentinelOne	Static AI – Malicious PE
Avira	TR/Rozena.oahcn
MAX	malware (ai score=87)
Antiy-AVL	Trojan/Win32.Rozena
Microsoft	Backdoor:Win64/MeterpreterReverseShell.A
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Win32.Malware.Rozena.F
Google	Detected
AhnLab-V3	Trojan/Win.Evo-gen.C5506041
VBA32	Trojan.Rozena
ALYac	Generic.ShellCode.Marte.2.870F04F1
Cylance	unsafe
Panda	Trj/GdSda.A
TrendMicro-HouseCall	Backdoor.Win32.COBEACON.YXDJRZ
Rising	Backdoor.CobaltStrike/x64!1.DEE2 (CLASSIC)
Ikarus	Trojan.Win32.Rozena
Fortinet	W32/Rozena.AZP!tr
AVG	Win32:MsfShell-V [Hack]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Generic.ShellCode.Marte.2.870F04F1?

Generic.ShellCode.Marte.2.870F04F1 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X