Categories: Malware

What is “Generic.ShellCode.Marte.J.B85CA565”?

The Generic.ShellCode.Marte.J.B85CA565 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Generic.ShellCode.Marte.J.B85CA565 virus can do?

  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • CAPE detected the StrongPity malware family
  • Anomalous binary characteristics
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Generic.ShellCode.Marte.J.B85CA565?


File Info:

name: B06433813AC756B159A6.mlwpath: /opt/CAPEv2/storage/binaries/cff743d6880adf8c65b605130e69cabee29aea6c74fbaebd2e6ed1710ab84e4ecrc32: FFE6AC6Bmd5: b06433813ac756b159a65456ba4cd657sha1: a9b1e68daf35774e141191b62349c57d6d5532cdsha256: cff743d6880adf8c65b605130e69cabee29aea6c74fbaebd2e6ed1710ab84e4esha512: 8c956e1bd148cbbe02133f64e6f01231c2da7c16d472aa1afa98886def4f17f79493b12c56ce83fd1e0b03e96ab3cfbf45299b906841491514b1cd5c898344e4ssdeep: 3072:7DuGWmvNB7QXJ+9LZSHnKSnpap1RVNde/x6vAw1RZzFPk2I111KYTI1Uk1AxFr:HuGWCaXJLHgeJwhHMzTy1type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1D4149C42B4C1A571D57E0E308571C9E04A7EF8716E648D9B33D8223E9EA52D1AA33F37sha3_384: 3d5f4023b6ff90156ca5990d965e1b137b5ae068f2a0e5015c555574f72c369a23c2ce53092837891593aa891df2ef5cep_bytes: 8bec609ce9bec20100ff558bec6a00fftimestamp: 2019-02-04 10:49:29

Version Info:

0: [No Data]

Generic.ShellCode.Marte.J.B85CA565 also known as:

Bkav W32.AIDetect.malware1
Cynet Malicious (score: 100)
Cylance Unsafe
Sangfor Suspicious.Win32.Save.a
Cybereason malicious.daf357
Elastic malicious (high confidence)
ESET-NOD32 a variant of Win32/StrongPity3.A
APEX Malicious
ClamAV Win.Trojan.StrongPity-7124525-0
Kaspersky VHO:Trojan.Win32.StrongPity.gen
BitDefender Generic.ShellCode.Marte.J.B85CA565
MicroWorld-eScan Generic.ShellCode.Marte.J.B85CA565
Ad-Aware Generic.ShellCode.Marte.J.B85CA565
Emsisoft Generic.ShellCode.Marte.J.B85CA565 (B)
VIPRE Generic.ShellCode.Marte.J.B85CA565
Trapmine malicious.moderate.ml.score
FireEye Generic.mg.b06433813ac756b1
Sophos Generic ML PUA (PUA)
Jiangmin Trojan.StrongPity.cv
Avira TR/AD.PortoRansom.yqyoy
MAX malware (ai score=81)
Antiy-AVL Trojan/Win32.StrongPity
Microsoft Trojan:Win32/Wacatac.B!ml
Arcabit Generic.ShellCode.Marte.J.B85CA565
ViRobot Trojan.Win32.StrongPity.110928.B
GData Win32.Trojan.PSE.1UBZG9P
Google Detected
AhnLab-V3 Trojan/Win.Evo-gen.R535826
Acronis suspicious
ALYac Generic.ShellCode.Marte.J.B85CA565
Malwarebytes Malware.AI.4009718011
Panda Trj/GdSda.A
Rising Trojan.Kryptik!8.8 (TFE:1:cWPPKukGaPL)
Yandex Trojan.GenAsa!rCFWRKPr900
SentinelOne Static AI – Malicious PE
Fortinet W32/GenKryptik.GCTV!tr
BitDefenderTheta Gen:NN.ZexaF.34796.lyW@ayPmtRci
AVG Win32:Evo-gen [Trj]
Avast Win32:Evo-gen [Trj]
CrowdStrike win/malicious_confidence_90% (D)

How to remove Generic.ShellCode.Marte.J.B85CA565?

  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.
Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Recent Posts

What is “MSIL/TrojanDropper.Agent.BVT”?

The MSIL/TrojanDropper.Agent.BVT is considered dangerous by lots of security experts. When this infection is active,…

1 day ago

Should I remove “Generic.Dacic.94CCEEA9.A.A4A6DA47”?

The Generic.Dacic.94CCEEA9.A.A4A6DA47 is considered dangerous by lots of security experts. When this infection is active,…

1 day ago

Malware.AI.524217860 removal tips

The Malware.AI.524217860 is considered dangerous by lots of security experts. When this infection is active,…

1 day ago

Trojan:Win32/Koutodoor.F removal tips

The Trojan:Win32/Koutodoor.F is considered dangerous by lots of security experts. When this infection is active,…

1 day ago

How to remove “Malware.AI.1412460714”?

The Malware.AI.1412460714 is considered dangerous by lots of security experts. When this infection is active,…

1 day ago

Generic.Dacic.8952383F.A.5EC8C34B removal instruction

The Generic.Dacic.8952383F.A.5EC8C34B is considered dangerous by lots of security experts. When this infection is active,…

1 day ago