Categories: Malware

What is “Generic.ShellCode.Marte.3.205426F6”?

The Generic.ShellCode.Marte.3.205426F6 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.ShellCode.Marte.3.205426F6 virus can do?

Performs HTTP requests potentially not found in PCAP.
CAPE extracted potentially suspicious content
Authenticode signature is invalid
Attempts to modify proxy settings
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Generic.ShellCode.Marte.3.205426F6?


File Info:
name: A527E8F66E648F3FA9B2.mlwpath: /opt/CAPEv2/storage/binaries/821d7dd4e8cae0798c4e02b6a77925f4061a35f18099eac36bb24376f7bef1a2crc32: C980FCAEmd5: a527e8f66e648f3fa9b2f183ca07e831sha1: 307cddb84e6591c24a87b70bd16274f8cc92883bsha256: 821d7dd4e8cae0798c4e02b6a77925f4061a35f18099eac36bb24376f7bef1a2sha512: 605b3bfb497382201917d56e258308fd350aa3dd0d80379e997ba909c61f631f0c15823dd05edd9fecd4433cbd412dd29aad8c9ad0fe53e498d3ed46140e0239ssdeep: 1536:bHP/WbyzI1LELMKTBYdAEnfj016o/Ak/7DfN:bvObyM1LELMKFK416Y/9type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T186634C87F9C754F1FA4754B051A7BB7F4E322B028428DEBEC7A4EF42D923953A54A108sha3_384: 1aed24e3254bf3c127ff2414718001c2e0fd9933b1fd32d6d433f2b65364bc45e079a06c7c6da324e7b0a8775d84880eep_bytes: 83ec0cc7059823410001000000e8fe01timestamp: 2023-07-19 13:18:50
Version Info:
0: [No Data]

Generic.ShellCode.Marte.3.205426F6 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Agentb.X!c
Elastic	malicious (high confidence)
MicroWorld-eScan	DeepScan:Generic.ShellCode.Marte.3.205426F6
ClamAV	Win.Exploit.Deepscan-9883529-0
FireEye	DeepScan:Generic.ShellCode.Marte.3.205426F6
CAT-QuickHeal	Trojan.Meterpreterc
ALYac	DeepScan:Generic.ShellCode.Marte.3.205426F6
Malwarebytes	Rozena.Trojan.Shell.DDS
VIPRE	DeepScan:Generic.ShellCode.Marte.3.205426F6
Sangfor	Trojan.Win32.Meterpreter.Vgwe
K7AntiVirus	Trojan ( 0058a79a1 )
Alibaba	Trojan:Win32/Meterpreter.00adbb6c
K7GW	Trojan ( 0058a79a1 )
CrowdStrike	win/malicious_confidence_100% (W)
Cyren	W32/Rozena.DJ.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Rozena.BGH
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.Win32.Agentb.gen
BitDefender	DeepScan:Generic.ShellCode.Marte.3.205426F6
Avast	Win32:HacktoolX-gen [Trj]
Tencent	Malware.Win32.Gencirc.11b4b251
Emsisoft	DeepScan:Generic.ShellCode.Marte.3.205426F6 (B)
F-Secure	Heuristic.HEUR/AGEN.1342123
TrendMicro	TROJ_GEN.R002C0DGK23
McAfee-GW-Edition	BehavesLike.Win32.Generic.kh
Sophos	Mal/Generic-S
GData	Win32.Trojan.PSE.1E96IV3
Jiangmin	Trojan.Generic.gxuin
Avira	HEUR/AGEN.1342123
MAX	malware (ai score=83)
Antiy-AVL	Trojan/Win32.Rozena
Arcabit	DeepScan:Generic.ShellCode.Marte.3.205426F6
ZoneAlarm	HEUR:Trojan.Win32.Agentb.gen
Microsoft	Trojan:Win32/Meterpreter.gen!C
Google	Detected
AhnLab-V3	Trojan/Win.Meterpreter.R458267
McAfee	GenericRXSN-SP!A527E8F66E64
TACHYON	Trojan/W32.Agent.67072.AML
VBA32	Trojan.Wacatac
Cylance	unsafe
TrendMicro-HouseCall	TROJ_GEN.R002C0DGK23
Rising	Trojan.Meterpreter!8.E532 (TFE:5:qF32X3T7iPV)
Ikarus	Trojan.Win32.Meterpreter
MaxSecure	Virus.W32.ETap
Fortinet	W32/Rozena.BGH!tr
AVG	Win32:HacktoolX-gen [Trj]
Cybereason	malicious.66e648
DeepInstinct	MALICIOUS