Categories: Malware

About “Generic.ShellCode.Marte.H.DDF63068” infection

The Generic.ShellCode.Marte.H.DDF63068 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.ShellCode.Marte.H.DDF63068 virus can do?

Sample contains Overlay data
CAPE extracted potentially suspicious content
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Generic.ShellCode.Marte.H.DDF63068?


File Info:
name: 7AFC390C01779237C31D.mlwpath: /opt/CAPEv2/storage/binaries/302faf19fe40666f00e702596e85dff4286033b1d57fbb71a93209ba9117639fcrc32: 70FC1B67md5: 7afc390c01779237c31d8af284cb8cd2sha1: efd8052ed82a578296e5789437c540567143d9e5sha256: 302faf19fe40666f00e702596e85dff4286033b1d57fbb71a93209ba9117639fsha512: 1c5881a76408c50eb02c6268647f688c61a203a3a4918039610c845132cfe7347595cb834f54d5461a75c398917d3929038d525422901743cf046411e3ec316essdeep: 1536:CmaenuuJwnvZITdruGpPO5rQHdH1a/sJNvao7PkXW:AeDptpWCHlTNbPFtype: PE32 executable (console) Intel 80386, for MS Windowstlsh: T1D0A31896ABD5AD63DA45063E98F68309233DF6C41B838B271E30A53A0F536D0BEC6547sha3_384: 183293f05762dddb9cc55c1258b5e428760ba719dea8fa786ee5ac313744c2a5b83c55bc59f75bcf15455d8126e3dcecep_bytes: 493f414b9b4a40984092939bf9439841timestamp: 2022-06-26 21:35:37
Version Info:
0: [No Data]

Generic.ShellCode.Marte.H.DDF63068 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Generic.lB6l
DrWeb	PowerShell.DownLoader.36
MicroWorld-eScan	Generic.ShellCode.Marte.H.DDF63068
ClamAV	Win.Trojan.MSShellcode-7
FireEye	Generic.mg.7afc390c01779237
Skyhigh	BehavesLike.Win32.Generic.cm
ALYac	Generic.ShellCode.Marte.H.DDF63068
Cylance	unsafe
Sangfor	HackTool.Win32.Reverse_Bin_v2_5_through_v4_x.uwccg
K7AntiVirus	Trojan ( 001172b51 )
Alibaba	Trojan:Win32/CobaltStrike.5c89
K7GW	Trojan ( 001172b51 )
CrowdStrike	win/malicious_confidence_100% (W)
Arcabit	Generic.ShellCode.Marte.H.DDFDF65C
BitDefenderTheta	Gen:NN.ZexaF.36680.g8Y@aW2qYKe
Symantec	Trojan Horse
ESET-NOD32	a variant of Generik.HQKLYGH
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Generic.ShellCode.Marte.H.DDF63068
NANO-Antivirus	Trojan.Win32.Shellcode.ewfvwj
Avast	Win32:SwPatch [Wrm]
Tencent	Malware.Win32.Gencirc.10bddeda
Emsisoft	Generic.ShellCode.Marte.H.DDF63068 (B)
F-Secure	Trojan.TR/Patched.Gen2
VIPRE	Generic.ShellCode.Marte.H.DDF63068
TrendMicro	Backdoor.Win32.COBEACON.SMJMAC
Sophos	Mal/EncPk-ACE
SentinelOne	Static AI – Malicious PE
Google	Detected
Avira	TR/Patched.Gen2
Antiy-AVL	Trojan/Win32.Rozena.ed
Kingsoft	malware.kb.a.903
Xcitium	TrojWare.Win32.Rozena.A@4jwdqr
Microsoft	Trojan:Win32/Swrort.A
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Win32.Trojan.PSE.16SUL61
Varist	W32/Swrort.B.gen!Eldorado
AhnLab-V3	Trojan/Win.Generic.R492713
McAfee	RDN/Generic.hra
MAX	malware (ai score=82)
Malwarebytes	Generic.Malware.AI.DDS
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	Mal_Mlwr-13
Rising	HackTool.Swrort!1.6477 (CLASSIC)
Ikarus	Trojan.Win32.Rozena
MaxSecure	Trojan.Malware.7164915.susgen
Fortinet	W32/Swrort.C!tr
AVG	Win32:SwPatch [Wrm]
DeepInstinct	MALICIOUS