Generic.Trojan.RemotePotato.1.036A74A6 malicious file

The Generic.Trojan.RemotePotato.1.036A74A6 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Generic.Trojan.RemotePotato.1.036A74A6 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Dynamic (imported) function loading detected
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Generic.Trojan.RemotePotato.1.036A74A6?


File Info:
name: 5528D667F224DAAD6AE6.mlw
path: /opt/CAPEv2/storage/binaries/fc1439b29488d9f779b28a2ac87b8ba38b4ded2fed7fffc1d32434fdd65ad794
crc32: 2DB43B00
md5: 5528d667f224daad6ae61cd505ab200e
sha1: 0125b1a036e24e8f48f86c37707f9d94ffa29534
sha256: fc1439b29488d9f779b28a2ac87b8ba38b4ded2fed7fffc1d32434fdd65ad794
sha512: 1d404afae622ac95d29a6cd255aebfcee1900bd05ddd7544ba0ef6c53e9cb8cda7651f70e1a3f93ac5708325b278d5771137a7202e536b77b599f42cb2a1b2ea
ssdeep: 3072:MONAENUsiCCff1OAxnvL6fpoVsI4Gzja:VRNUACXcSnLa
type: PE32+ executable (console) x86-64, for MS Windows
tlsh: T1C6048D06B3A020FAE0778238C9915616F7B2B86507319B5F17A4477EDF272906E3EF61
sha3_384: 8f280261f6d172667ffb08e92d3193f7fc70ff106f769c60be7613160ebc86a8d82d248d00fc940c1b2d32d98298c6a4
ep_bytes: 4883ec28e89b0200004883c428e972fe
timestamp: 2021-12-10 12:38:00

Version Info:
0: [No Data]

Generic.Trojan.RemotePotato.1.036A74A6 also known as:

Elastic	malicious (high confidence)
ClamAV	Win.Exploit.RemotePotato0-9856253-0
ALYac	Generic.Trojan.RemotePotato.1.036A74A6
BitDefender	Generic.Trojan.RemotePotato.1.036A74A6
Cybereason	malicious.036e24
ESET-NOD32	a variant of Win64/HackTool.RoguePotato.A
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Exploit.Win64.Kartosh.rem
MicroWorld-eScan	Generic.Trojan.RemotePotato.1.036A74A6
Ad-Aware	Generic.Trojan.RemotePotato.1.036A74A6
FireEye	Generic.mg.5528d667f224daad
Emsisoft	Generic.Trojan.RemotePotato.1.036A74A6 (B)
GData	Generic.Trojan.RemotePotato.1.036A74A6
Avira	HEUR/AGEN.1138960
MAX	malware (ai score=81)
Arcabit	Generic.Trojan.RemotePotato.1.036A74A6
Microsoft	Trojan:Win32/Sabsik.FL.B!ml

How to remove Generic.Trojan.RemotePotato.1.036A74A6?

Generic.Trojan.RemotePotato.1.036A74A6 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X