What is “Generic.ShellCode.Marte.J.9E297CEE”?

The Generic.ShellCode.Marte.J.9E297CEE is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Generic.ShellCode.Marte.J.9E297CEE virus can do?

Unconventionial language used in binary resources: Spanish (Mexican)
The binary contains an unknown PE section name indicative of packing
The executable is compressed using UPX
Authenticode signature is invalid

How to determine Generic.ShellCode.Marte.J.9E297CEE?


File Info:
name: 2597F30A97E835D6AF8C.mlw
path: /opt/CAPEv2/storage/binaries/96d3c676b25e48a18ea3c3a63a4001c6aea815d70eb83fa9c098446835a385e9
crc32: 4A75E8B2
md5: 2597f30a97e835d6af8c86a7f62db458
sha1: e7ca39c147ee15ddea3db3a1216bdc83059088a2
sha256: 96d3c676b25e48a18ea3c3a63a4001c6aea815d70eb83fa9c098446835a385e9
sha512: 93c17420c5bb55d75dfc21e321323d532a1ee7eaa4de42a619b1cc6ad2046686e7de2a0393b47d5f2c9b448b85122a0ca457d497a8e638f6a994aea022419942
ssdeep: 24576:F4VB6FYiQKVCrLumcLBfE+KZGs1qWe4kTzNAI2UNQrrgrrwrr1rrLrrHrrWrrH8e:F4VB6FYiQKVyLuBlMT8s1qWzkHNAI2UJ
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T17F553995E24DDBFFE117F2B6204E12B01941E9C14BFD234A309DC254AB48EC8FA697D9
sha3_384: 2825388bafcdbee129a7b0553f990c38c595472fa7d63834e715adc553f6e43f3b4b34cb2c4f8dcbf6de237230e225ca
ep_bytes: 8bec609ce98eea0700006880754a0064
timestamp: 2015-05-04 15:34:23

Version Info:
Comments: 
CompanyName: Satinfo SL.
FileDescription: Utilidad
FileVersion: 2, 14, 4, 14
InternalName: Elis
LegalCopyright: Copyright (C) 2015
LegalTrademarks: 
OriginalFilename: Elis.EXE
PrivateBuild: 
ProductName: Aplicación Elis
ProductVersion: 2, 14, 4, 14
SpecialBuild: 
Translation: 0x0c0a 0x04b0

Generic.ShellCode.Marte.J.9E297CEE also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
MicroWorld-eScan	Generic.ShellCode.Marte.J.9E297CEE
ALYac	Generic.ShellCode.Marte.J.9E297CEE
Malwarebytes	Trojan.Crypt
VIPRE	Generic.ShellCode.Marte.J.9E297CEE
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 004bcce41 )
K7GW	Trojan ( 004bcce41 )
Cybereason	malicious.147ee1
Symantec	ML.Attribute.HighConfidence
tehtris	Generic.Malware
APEX	Malicious
Cynet	Malicious (score: 100)
BitDefender	Generic.ShellCode.Marte.J.9E297CEE
Ad-Aware	Generic.ShellCode.Marte.J.9E297CEE
Emsisoft	Generic.ShellCode.Marte.J.9E297CEE (B)
Comodo	Packed.Win32.MUPX.Gen@24tbus
Trapmine	malicious.moderate.ml.score
FireEye	Generic.mg.2597f30a97e835d6
Sophos	Generic ML PUA (PUA)
Jiangmin	Heur:TrojanDownloader.Agent
Avira	TR/Patched.Ren.Gen
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Generic.ShellCode.Marte.J.9E297CEE
GData	Generic.ShellCode.Marte.J.9E297CEE
Acronis	suspicious
MAX	malware (ai score=82)
VBA32	Heur.Trojan.Hlux
Cylance	Unsafe
Rising	Trojan.Agent!1.6853 (CLASSIC)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/GenKryptik.GCTV!tr
BitDefenderTheta	Gen:NN.ZexaF.34796.rn0@aqGAJ@R

How to remove Generic.ShellCode.Marte.J.9E297CEE?

Generic.ShellCode.Marte.J.9E297CEE removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X