Generik.MOXKCKQ (file analysis)

The Generik.MOXKCKQ is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Generik.MOXKCKQ virus can do?

The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Generik.MOXKCKQ?


File Info:
name: 4A8BF22BFDCDA4D84C84.mlw
path: /opt/CAPEv2/storage/binaries/8ca8d915c046714828243f0b3d5cd9f34ad7fcfd8d8f6ba8e609dec3092c241c
crc32: 0E8E6D92
md5: 4a8bf22bfdcda4d84c8476aba18f98f5
sha1: 9ceae8faccdb9c5db0457daae6df109156fd9191
sha256: 8ca8d915c046714828243f0b3d5cd9f34ad7fcfd8d8f6ba8e609dec3092c241c
sha512: da5fa3b3681754ba9fef6db731359ed5bd55f2197e979bc80f3ed315348dd4ed67bd56d279cc7a7833f0cb9cd01749112e07182023a816631311d6eebb3da496
ssdeep: 12288:ckhJk+aQgKT5HQm8xawMcMlkCIabjKoh9WXz:ckhJkoTVQ1YkCIabjKoh9Wj
type: PE32+ executable (console) x86-64, for MS Windows
tlsh: T1C535B21FEF508F64D45911B674AAC32F9AA1BD9804025316B769BF29E731F3033EB225
sha3_384: 1a4040eae8c3a556b01a2f3ca0cc705c2ec26da6a0a336f04df17bd78ea24fecf8d133a9dbeb2d46455b6d8c6ee64fb3
ep_bytes: 4883ec28488d0de50a0000e8e0040000
timestamp: 1970-01-01 00:00:00

Version Info:
0: [No Data]

Generik.MOXKCKQ also known as:

Lionic	Worm.Win32.AutoRun.o!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.Agent.FQKM
FireEye	Trojan.Agent.FQKM
McAfee	Artemis!4A8BF22BFDCD
Malwarebytes	Malware.AI.3696146603
Zillya	Worm.AutoRun.Win32.170360
K7AntiVirus	Riskware ( 0040eff71 )
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.bfdcda
Cyren	W64/Autorun.EP.gen!Eldorado
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of Generik.MOXKCKQ
APEX	Malicious
Paloalto	generic.ml
ClamAV	Win.Worm.Vindor-9886047-0
Kaspersky	UDS:Worm.Win32.AutoRun.vx
BitDefender	Trojan.Agent.FQKM
Avast	Win32:VB-FBX
Sophos	Mal/Generic-S
DrWeb	Win32.HLLW.Autoruner.547
McAfee-GW-Edition	Artemis!Trojan
Emsisoft	Trojan.Agent.FQKM (B)
Ikarus	Trojan.Dropper
GData	Trojan.Agent.FQKM
Jiangmin	Packed.Krap.gvyf
Avira	HEUR/AGEN.1145262
Antiy-AVL	Trojan/Generic.ASMalwS.34937C8
Gridinsoft	Ransom.Win64.Sabsik.sa
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 100)
BitDefenderTheta	AI:Packer.DFF53E5D1C
ALYac	Trojan.Agent.FQKM
MAX	malware (ai score=82)
TrendMicro-HouseCall	TROJ_GEN.R03BH0CL221
Rising	Worm.VB!1.DA41 (CLASSIC)
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W64/Agent.EP!tr
AVG	Win32:VB-FBX

How to remove Generik.MOXKCKQ?

Generik.MOXKCKQ removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X