Categories: Malware

Generic.ShellCode.Marte.3.75ADA29A removal guide

The Generic.ShellCode.Marte.3.75ADA29A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.ShellCode.Marte.3.75ADA29A virus can do?

Sample contains Overlay data
CAPE extracted potentially suspicious content
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Generic.ShellCode.Marte.3.75ADA29A?


File Info:
name: EF79962425337DA858EB.mlwpath: /opt/CAPEv2/storage/binaries/664b2f5863f1863ee5aa61e216ba0cce7ab7e9834da2b884622d0bdd480935e2crc32: 61A71E69md5: ef79962425337da858eb0f88d14cfa72sha1: 12471b748a2bf965fd452cb5a5ea56e565d4738bsha256: 664b2f5863f1863ee5aa61e216ba0cce7ab7e9834da2b884622d0bdd480935e2sha512: 586e29f9b4685891a9d5f130dbed67f089a9a85e8139b4859dd620662c3ac9737c51607d6b0c19c6546b952372a04bcd7859c09cf680deabdd3e795f982359f1ssdeep: 1536:vejh8yDAaEc1ybfdoTJR3++gWzKWqycBKg7qkL0/6:2xDAZ3+g0tMtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1FCA31896FA86ACA3D605033E99FA876D3239F7D447828B035E7870351B539C0AEC7647sha3_384: 3a0524507ef2bde4efa2e93f1d4e2970c27cc125680bc61c1d6986010107fa9665f39f95abb888b57a7bd28d4912b8afep_bytes: c7056c70400001000000e9b1fcffff90timestamp: 2023-05-12 11:58:29
Version Info:
0: [No Data]

Generic.ShellCode.Marte.3.75ADA29A also known as:

Bkav	W32.AIDetectMalware
MicroWorld-eScan	Generic.ShellCode.Marte.3.75ADA29A
Skyhigh	BehavesLike.Win32.Generic.cm
McAfee	Artemis!EF7996242533
VIPRE	Generic.ShellCode.Marte.3.75ADA29A
Sangfor	HackTool.Win32.Reverse_Bin_v2_5_through_v4_x.uwccg
BitDefender	Generic.ShellCode.Marte.3.75ADA29A
Cybereason	malicious.48a2bf
Arcabit	Generic.ShellCode.Marte.3.75ADA29A
BitDefenderTheta	Gen:NN.ZexaF.36792.g8Y@aWzX2ij
VirIT	Trojan.Win32.Genus.QRS
Symantec	Meterpreter
Elastic	Windows.Trojan.Metasploit
ESET-NOD32	a variant of Win32/Rozena.BRO
APEX	Malicious
Kaspersky	HEUR:Trojan.Win32.Phave.a
Rising	HackTool.Swrort!1.6477 (CLASSIC)
Sophos	ATK/Phantom-I
F-Secure	Heuristic.HEUR/AGEN.1367109
Zillya	Trojan.Generic.Win32.1724099
FireEye	Generic.mg.ef79962425337da8
Emsisoft	Generic.ShellCode.Marte.3.75ADA29A (B)
SentinelOne	Static AI – Malicious PE
MAX	malware (ai score=80)
Google	Detected
Avira	HEUR/AGEN.1367109
Antiy-AVL	Trojan/Win32.Meterpreter
Microsoft	Trojan:Win32/Meterpreter.gen!E
ZoneAlarm	HEUR:Trojan.Win32.Phave.a
GData	Generic.ShellCode.Marte.3.75ADA29A
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.Generic.R549105
VBA32	BScope.Trojan.Phave
ALYac	Generic.ShellCode.Marte.3.75ADA29A
DeepInstinct	MALICIOUS
Cylance	unsafe
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R011C0DKA23
Tencent	Trojan.Win32.Metasploit_heur.16000690
Ikarus	Trojan.Win32.Rozena
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Rozena.BLI!tr
AVG	Win32:Meterpreter-C [Trj]
Avast	Win32:Meterpreter-C [Trj]
CrowdStrike	win/malicious_confidence_100% (W)