Categories: Malware

What is “Mal/Generic-R + Mal/Behav-004”?

The Mal/Generic-R + Mal/Behav-004 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Mal/Generic-R + Mal/Behav-004 virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
Tries to unhook or modify Windows functions monitored by Cuckoo
Network activity detected but not expressed in API logs

How to determine Mal/Generic-R + Mal/Behav-004?


File Info:
crc32: A4C33E30md5: 91f9bf013eb8d7b4f348354a6c25d5edname: 91F9BF013EB8D7B4F348354A6C25D5ED.mlwsha1: 6fc3146d7b224df626309c7908f05de70b80c08fsha256: e14a870da24fcff3ee5a80f15260d7148f5f361fb7c116f463d689470ea7c2e6sha512: ca4e597209069d3cb498c3bd5b847e35fc31508a164465c3eba14a9907e24b755e15986118dfd8afa8cc9209c093ca76170caf849695fefb820f7bdce2ee4ceessdeep: 24576:Ir09B4akpcFe7wR2Bhh/qWdmsmIRQ1uyHjgL0J:e09Lw+EhrFWgL0type: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Mal/Generic-R + Mal/Behav-004 also known as:

Bkav	W32.AIDetectVM.malware2
Elastic	malicious (high confidence)
DrWeb	Trojan.PWS.Wsgame.53267
Cynet	Malicious (score: 90)
CAT-QuickHeal	Trojan.Avkill
ALYac	Gen:Heur.PWSIME.2
Cylance	Unsafe
Sangfor	Malware
CrowdStrike	win/malicious_confidence_90% (W)
Alibaba	Trojan:Win32/Avkill.9bdafd69
Cybereason	malicious.13eb8d
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Packed.BlackMoon.A potentially unwanted
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Malware.Onlinegames-6629257-0
BitDefender	Gen:Heur.PWSIME.2
NANO-Antivirus	Trojan.Win32.Wsgame.fpnklh
MicroWorld-eScan	Gen:Heur.PWSIME.2
Tencent	Win32.Trojan.Avkill.Hupl
Ad-Aware	Gen:Heur.PWSIME.2
Sophos	Mal/Generic-R + Mal/Behav-004
Comodo	Malware@#3pzknuskdfnbz
F-Secure	Trojan.TR/AVKill.dacuf
BitDefenderTheta	Gen:NN.ZexaF.34700.wzWbauewhqmb
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Backdoor.tc
FireEye	Generic.mg.91f9bf013eb8d7b4
Emsisoft	Gen:Heur.PWSIME.2 (B)
SentinelOne	Static AI – Suspicious PE
Avira	TR/AVKill.dacuf
eGambit	Unsafe.AI_Score_100%
Antiy-AVL	Trojan/Win32.SGeneric
Microsoft	Trojan:Win32/Avkill.E
Gridinsoft	Trojan.Heur!.03212021
Arcabit	Trojan.PWSIME.2
AegisLab	Trojan.Win32.DeepScan.4!c
GData	Gen:Heur.PWSIME.2
AhnLab-V3	Malware/Win32.Generic.C4262579
McAfee	Artemis!91F9BF013EB8
MAX	malware (ai score=99)
Panda	Trj/GdSda.A
Rising	Trojan.Avkill!8.902 (TFE:5:ojQvr1drESF)
Yandex	Trojan.GenAsa!EbYnKmy5Svg
MaxSecure	Trojan.Malware.74662870.susgen
Fortinet	W32/Disabler.NAT!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml
Qihoo-360	Win32/Trojan.615