Malware

What is “Mal/Generic-S + Bat/Agent-BGKR”?

Malware Removal

The Mal/Generic-S + Bat/Agent-BGKR is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Mal/Generic-S + Bat/Agent-BGKR virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Executable file is packed/obfuscated with MPRESS
  • Authenticode signature is invalid
  • Uses Windows utilities for basic functionality

How to determine Mal/Generic-S + Bat/Agent-BGKR?



File Info:

name: C2DD59BF15DA955535D0.mlw
path: /opt/CAPEv2/storage/binaries/5b6794041930ff6ec4b8536299e0d54482636209fcdbc40dcb1cc35a9043544d
crc32: 56249F3C
md5: c2dd59bf15da955535d08fb0a2294350
sha1: 4896d47beb918e076c94ad9165318794fcd7ecaf
sha256: 5b6794041930ff6ec4b8536299e0d54482636209fcdbc40dcb1cc35a9043544d
sha512: d5bc4eadd374855fb5fd8d9bff52f5ef1b531906b2edd69e9fbf3017a43475ea6ca73cfa02b6084baf3d81ba88521aff30165c6861b160b63cad63820fe89b7a
ssdeep: 6144:glvaVl5dnaj+SIwy18UJVPQ+FmXSZTupclu:Hj5laj+SIwQ7PQ++S/0
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T16C2423B3A10C6673C3786671977D96B8683FE81D0546F19CFBCB38112AF2623253A586
sha3_384: d58c6a1c489a0edf57639567b2e078fa51bd7ab434c6b86667f519fb46a2089718800e3990754274ea59c2a7c9f6f27d
ep_bytes: 60e80000000058055a0b00008b3003f0
timestamp: 2011-03-25 13:17:51


Version Info:

0: [No Data]

Mal/Generic-S + Bat/Agent-BGKR also known as:

BkavW32.AIDetect.malware1
LionicTrojan.BAT.Agent.4!c
tehtrisGeneric.Malware
MicroWorld-eScanDropped:Trojan.Bat.AAPW
FireEyeGeneric.mg.c2dd59bf15da9555
CAT-QuickHealTrojan.Wacatac.S19452450
ALYacDropped:Trojan.Bat.AAPW
CylanceUnsafe
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 005768dd1 )
AlibabaTrojan:BAT/BATCH.cabb58df
K7GWTrojan ( 00577de81 )
Cybereasonmalicious.f15da9
CyrenW32/Dropper.EG.gen!Eldorado
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of BAT/Agent.NAS
APEXMalicious
Paloaltogeneric.ml
ClamAVWin.Tool.Kmsauto-9848584-0
KasperskyTrojan.BAT.Agent.bbn
BitDefenderDropped:Trojan.Bat.AAPW
AvastWin32:Malware-gen
TencentMalware.Win32.Gencirc.10ce3959
Ad-AwareDropped:Trojan.Bat.AAPW
SophosMal/Generic-S + Bat/Agent-BGKR
F-SecureTrojan.TR/Redcap.osjdd
DrWebTrojan.Siggen12.42972
TrendMicroTROJ_GEN.R002C0DCC21
McAfee-GW-EditionBehavesLike.Win32.Generic.dc
EmsisoftDropped:Trojan.Bat.AAPW (B)
IkarusVirus.BAT.Agent
GDataDropped:Trojan.Bat.AAPW
JiangminTrojan.BAT.adj
AviraTR/Redcap.osjdd
MAXmalware (ai score=83)
Antiy-AVLTrojan/Generic.ASMalwS.2A4BB41
MicrosoftTrojan:Win32/Ymacco.AA5B
CynetMalicious (score: 100)
Acronissuspicious
McAfeeGenericRXNM-EU!C2DD59BF15DA
VBA32Trojan.BAT.Agent
MalwarebytesTrojan.Dropper.BAT
TrendMicro-HouseCallTROJ_GEN.R002C0DCC21
RisingDropper.BcryptInject!8.12388 (RDMK:cmRtazp5imM9ePc8MYYGGl4ectxC)
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Agent.BBN!tr
BitDefenderThetaGen:NN.ZexaF.34606.Ry0@aSfE0Qb
AVGWin32:Malware-gen
PandaTrj/CI.A
CrowdStrikewin/malicious_confidence_60% (W)

How to remove Mal/Generic-S + Bat/Agent-BGKR?

Mal/Generic-S + Bat/Agent-BGKR removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment