Categories: Malware

Mal/Generic-S + Troj/Azov-B malicious file

The Mal/Generic-S + Troj/Azov-B is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Mal/Generic-S + Troj/Azov-B virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Mal/Generic-S + Troj/Azov-B?


File Info:
name: 5C37A887580F39DBC11E.mlwpath: /opt/CAPEv2/storage/binaries/4a0bf8ad66d39083f23c88e36c8372a8ca9d859cf9fd0ef796c0dc9f4b7a96f1crc32: 0CDCB05Cmd5: 5c37a887580f39dbc11eb9ad3dbdd4e8sha1: 4fbdb4a8ef29b71f65e3bc93708f2919db4aec84sha256: 4a0bf8ad66d39083f23c88e36c8372a8ca9d859cf9fd0ef796c0dc9f4b7a96f1sha512: 37aa3ea6f4dd7905da6c8216bb63df58b26a25278c60b7be6ab78b48f94dc1cca99f5f6d380f3bf8cee04679dd4a47ae57e220c19c36e3e3ba7c381548180591ssdeep: 24576:VME+gtB/jwUSPXKAZM49zlqGA8N/JYiToIlO70odAZ3cPf42ma:VMM/jwUmdZM4Sjw/tTMnANc/type: PE32+ executable (GUI) x86-64, for MS Windowstlsh: T10C959D07F26940E9C05EC178CB46D631AA71BC894B65A9EF22907F163E76BD01F3E721sha3_384: 1a52bfd844ed48d4edcdf7803521abc2dd2e8d29cf1d09e16559cea53b0eb60477b80d591b82238e9f6e1878b53eae1fep_bytes: 488d05c6fbffff4805c5020000ffd0c8timestamp: 2020-02-29 02:15:54
Version Info:
CompanyName: Google LLCFileDescription: Google ChromeFileVersion: 80.0.3987.132InternalName: chrome_exeLegalCopyright: Copyright 2019 Google LLC. All rights reserved.OriginalFilename: chrome.exeProductName: Google ChromeProductVersion: 80.0.3987.132CompanyShortName: GoogleProductShortName: ChromeLastChange: fcea73228632975e052eb90fcf6cd1752d3b42b4-refs/branch-heads/3987@#974Official Build: 1Translation: 0x0409 0x04b0

Mal/Generic-S + Troj/Azov-B also known as:

Lionic	Trojan.Win32.Crypmod.tsb7
DrWeb	Win32.HLLP.Azov.3
MicroWorld-eScan	Win64.Ransom.A
ALYac	Win64.Ransom.A
Cylance	Unsafe
VIPRE	Win64.Ransom.A
K7AntiVirus	Virus ( 0059ab071 )
Alibaba	Virus:Win64/Expiro.8f15d835
K7GW	Virus ( 0059ab071 )
Cyren	W64/Expiro.BM.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win64/Expiro.DR
TrendMicro-HouseCall	TROJ_GEN.R011H09JL22
ClamAV	Win.Ransomware.Expiro-9975896-0
Kaspersky	VHO:Trojan.Win64.Convagent.gen
BitDefender	Win64.Ransom.A
Avast	FileRepMalware [Misc]
Tencent	Win64.Virus.Expiro.Jqil
Ad-Aware	Win64.Ransom.A
Emsisoft	Win64.Ransom.A (B)
McAfee-GW-Edition	BehavesLike.Win64.Virus.th
FireEye	Win64.Ransom.A
Sophos	Mal/Generic-S + Troj/Azov-B
GData	Win64.Ransom.A
Jiangmin	Trojan.Blocker.utc
Google	Detected
MAX	malware (ai score=84)
Antiy-AVL	Virus/Win64.Expiro.dr
Arcabit	Win64.Ransom.A
Microsoft	Trojan:Win32/Wacatac.B!ml
AhnLab-V3	Trojan/Win.Generic.R534205
McAfee	Artemis!5C37A887580F
Rising	Virus.Expiro!8.375 (CLOUD)
Ikarus	Virus.Win64.Expiro
Fortinet	W64/Expiro.DR!tr
AVG	FileRepMalware [Misc]