What is “Jalapeno.373”?

The Jalapeno.373 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Jalapeno.373 virus can do?

The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
CAPE detected the XWorm malware family
Binary file triggered YARA rule

How to determine Jalapeno.373?


File Info:
name: D36E52F77676BE1071C8.mlw
path: /opt/CAPEv2/storage/binaries/45d4947a842d14f4045fd458d8d8d37a2b080620da9f32f7fc227e6993e9ab08
crc32: 61AD45B0
md5: d36e52f77676be1071c85ee4879dcb3b
sha1: 09689e9a80a52f4871080ddca2c7e6a8010a3f78
sha256: 45d4947a842d14f4045fd458d8d8d37a2b080620da9f32f7fc227e6993e9ab08
sha512: d86ccf91e281698d460832ab0dc11b313f239248f560f99cee89181ae946dff565bef1addb934083072deb499064990f626e25253dda5e6537e2bbb7444a2a12
ssdeep: 1536:oQluTcsrqET4ZfbW+mSM3QSWJ6v/chbvOgavpcMHZGyb4o2F4c:ofhufbW0bvOg6p9Zxj2F4c
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T15D939D6C7BE24515F1BFABB01DF17262CB7AE2535D02955F60C8058E0723A88CE927F9
sha3_384: 4840ae642cb61374942253ff132f0f56e8883d83ecf6d51d4efdf67385f0ac61e276ebf98ef9227bf2736adcd9314254
ep_bytes: ff250020400000000000000000000000
timestamp: 2024-04-21 16:00:46

Version Info:
Translation: 0x0000 0x04b0
FileDescription:  
FileVersion: 1.0.0.0
InternalName: fix sensetivity by sekao.exe
LegalCopyright:  
OriginalFilename: fix sensetivity by sekao.exe
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Jalapeno.373 also known as:

Bkav	W32.AIDetectMalware.CS
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Jalapeno.373
FireEye	Generic.mg.d36e52f77676be10
CAT-QuickHeal	Worm.GenericFC.S32598663
Skyhigh	BehavesLike.Win32.Worm.nh
McAfee	Trojan-FVYT!D36E52F77676
Cylance	unsafe
Sangfor	Suspicious.Win32.Save.a
K7GW	Trojan ( 005aa5f01 )
K7AntiVirus	Trojan ( 005aa5f01 )
VirIT	Trojan.Win32.MSIL_Heur.B
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Agent.DWN
APEX	Malicious
ClamAV	Win.Packed.njRAT-10002074-1
Kaspersky	HEUR:Backdoor.MSIL.XWorm.gen
BitDefender	Gen:Variant.Jalapeno.373
Avast	Win32:RATX-gen [Trj]
Emsisoft	Gen:Variant.Jalapeno.373 (B)
Google	Detected
F-Secure	Trojan.TR/Spy.Gen
DrWeb	BackDoor.BladabindiNET.30
Trapmine	malicious.moderate.ml.score
Sophos	Troj/RAT-FJ
SentinelOne	Static AI – Malicious PE
Varist	W32/MSIL_Agent.BUD.gen!Eldorado
Avira	TR/Spy.Gen
Kingsoft	malware.kb.c.1000
Microsoft	Trojan:MSIL/AsyncRAT.R!MTB
Arcabit	Trojan.Jalapeno.373
ZoneAlarm	HEUR:Backdoor.MSIL.XWorm.gen
GData	MSIL.Backdoor.XWormRAT.A
AhnLab-V3	Trojan/Win.AntiVm.C5369627
BitDefenderTheta	Gen:NN.ZemsilF.36804.fm0@aagkH2
ALYac	IL:Trojan.MSILZilla.25346
MAX	malware (ai score=86)
VBA32	Backdoor.MSIL.XWorm.gen
Malwarebytes	Backdoor.XWorm.Generic
Rising	Trojan.AntiVM!1.CF63 (CLASSIC)
Ikarus	Trojan.MSIL.Agent
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Conwise.RCE!tr
AVG	Win32:RATX-gen [Trj]
DeepInstinct	MALICIOUS

How to remove Jalapeno.373?

Jalapeno.373 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X