Malware

What is “Heur.Mint.Titirez.1.2A”?

Malware Removal

The Heur.Mint.Titirez.1.2A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Heur.Mint.Titirez.1.2A virus can do?

  • Executable code extraction
  • Creates RWX memory
  • Reads data out of its own binary image
  • A process created a hidden window
  • Drops a binary and executes it
  • Unconventionial language used in binary resources: Latvian
  • Uses Windows utilities for basic functionality
  • Enumerates services, possibly for anti-virtualization
  • Attempts to repeatedly call a single API many times in order to delay analysis time
  • Installs itself for autorun at Windows startup
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine Heur.Mint.Titirez.1.2A?


File Info:

crc32: 9C00BC48
md5: e056563e4328ae342d240e1bade2e705
name: upload_file
sha1: 01aae482ef741afa089da667aa4c25a0f941dc93
sha256: 4349c85cf8276a9facdb2316238d19c7db7b40d9965af6fb95379438552d1edb
sha512: f1278cda9658a78d8d956194b3c59d839c102c5d8dd4de155da018b54b28f17e00928033f57dced584cb95a6744efa8693ae8969e07604eafe00f04c07ef8669
ssdeep: 24576:agQJfWfWfWfWfWfWfWfWfWfWfWfWfWfWfWfWfWfWfWfWfWfWfWfWfWfWfWfWfWf:ag
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Heur.Mint.Titirez.1.2A also known as:

BkavW32.AIDetectVM.malware1
Elasticmalicious (high confidence)
DrWebTrojan.Siggen10.8493
MicroWorld-eScanGen:Heur.Mint.Titirez.1.2A
FireEyeGeneric.mg.e056563e4328ae34
CylanceUnsafe
ZillyaTrojan.Kryptik.Win32.2523449
K7AntiVirusTrojan ( 0056d3911 )
K7GWTrojan ( 0056d3911 )
CrowdStrikewin/malicious_confidence_60% (D)
BitDefenderThetaGen:NN.ZexaF.34570.@tW@aCQsMTdc
CyrenW32/Kryptik.BVD.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.HFRU
TrendMicro-HouseCallMal_Tofsee
ClamAVWin.Dropper.Tofsee-9478941-0
KasperskyHEUR:Trojan.Win32.Chapak.pef
BitDefenderGen:Heur.Mint.Titirez.1.2A
NANO-AntivirusTrojan.Win32.Tofsee.hsuaxh
Ad-AwareGen:Heur.Mint.Titirez.1.2A
EmsisoftGen:Heur.Mint.Titirez.1.2A (B)
F-SecureHeuristic.HEUR/AGEN.1138066
TrendMicroMal_Tofsee
McAfee-GW-EditionBehavesLike.Win32.Gupboot.vm
SentinelOneDFI – Malicious PE
AviraHEUR/AGEN.1138066
ArcabitTrojan.Mint.Titirez.1.2A
ZoneAlarmHEUR:Trojan.Win32.Chapak.pef
GDataGen:Heur.Mint.Titirez.1.2A
CynetMalicious (score: 100)
AhnLab-V3Malware/Win32.RL_Generic.R348903
Acronissuspicious
VBA32Backdoor.Tofsee
ALYacGen:Heur.Mint.Titirez.1.2A
MAXmalware (ai score=89)
MalwarebytesTrojan.Glupteba
APEXMalicious
RisingTrojan.Kryptik!1.CB14 (CLASSIC)
IkarusTrojan-Dropper.Win32.Danabot
FortinetW32/Ursnif.BCED!tr
AVGWin32:DropperX-gen [Drp]
Cybereasonmalicious.2ef741
Qihoo-360HEUR/QVM10.1.A23B.Malware.Gen

How to remove Heur.Mint.Titirez.1.2A?

Heur.Mint.Titirez.1.2A removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment