Mal/Generic-R + Troj/Emotet-CVE (file analysis)

The Mal/Generic-R + Troj/Emotet-CVE is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Mal/Generic-R + Troj/Emotet-CVE virus can do?

The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Mal/Generic-R + Troj/Emotet-CVE?


File Info:
crc32: 1EE218D6
md5: 136c153d397da6ac02657b6b3223c217
name: 136C153D397DA6AC02657B6B3223C217.mlw
sha1: fc637e94d0dd0a0e860832fee54d05446d0d27b2
sha256: 72977baac16ba20a36cdc03cf062481361a65f1a2302904871bc689c70cd9cd8
sha512: 4912e164f044b39b52552c603c95ed15e614b37aa79af3eba9a9f9ab5d0d29bf5457d8eff5f124c7a14a0912812a2a46e88d2aabfb900082d81fcb45b8969c1d
ssdeep: 3072:kA4UBWAk53s5IcEjPNMEGHRAWCIQ3Xp4MOjAVOccz2kQZhXJbEfY:kA4FA2s5ADtORAZICpdVOxbKBJbEf
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

Mal/Generic-R + Troj/Emotet-CVE also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Zusy.359046
FireEye	Generic.mg.136c153d397da6ac
McAfee	Emotet-FRR!136C153D397D
Cylance	Unsafe
AegisLab	Trojan.Win32.Bulz.4!c
Sangfor	Malware
K7AntiVirus	Trojan ( 005756961 )
BitDefender	Gen:Variant.Zusy.359046
K7GW	Trojan ( 0057530f1 )
CrowdStrike	win/malicious_confidence_100% (D)
Cyren	W32/Emotet.AZT.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
TrendMicro-HouseCall	TROJ_GEN.R011C0DA321
Avast	Win32:BankerX-gen [Trj]
Kaspersky	HEUR:Trojan-Banker.Win32.Emotet.pef
Alibaba	Trojan:Win32/EmotetCrypt.3a6c5cb8
ViRobot	Trojan.Win32.Emotet.175616.A
Rising	Trojan.Emotet!1.D0CC (CLASSIC)
Ad-Aware	Gen:Variant.Zusy.359046
Sophos	Mal/Generic-R + Troj/Emotet-CVE
F-Secure	Trojan.TR/AD.Emotet.fvi
TrendMicro	TROJ_GEN.R011C0DA321
McAfee-GW-Edition	BehavesLike.Win32.Emotet.cc
Emsisoft	Gen:Variant.Zusy.359046 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Backdoor.Emotet.vm
Avira	TR/AD.Emotet.fvi
Antiy-AVL	Trojan[Backdoor]/Win32.Emotet
Microsoft	Trojan:Win32/EmotetCrypt.PEF!MTB
Gridinsoft	Trojan.Win32.Packed.oa
Arcabit	Trojan.Zusy.D57A86
ZoneAlarm	HEUR:Trojan-Banker.Win32.Emotet.pef
GData	Gen:Variant.Zusy.359046
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Emotet.R361828
VBA32	Backdoor.Emotet
ALYac	Gen:Variant.Zusy.359046
MAX	malware (ai score=85)
Malwarebytes	Trojan.MalPack.TRE
Panda	Trj/GdSda.A
APEX	Malicious
ESET-NOD32	a variant of Win32/Kryptik.HILX
Tencent	Malware.Win32.Gencirc.10ce305e
Ikarus	Trojan-Banker.Emotet
Fortinet	W32/Kryptik.5F2A!tr
AVG	Win32:BankerX-gen [Trj]
Paloalto	generic.ml
Qihoo-360	Generic/Trojan.e9f

How to remove Mal/Generic-R + Troj/Emotet-CVE?

Mal/Generic-R + Troj/Emotet-CVE removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X