Categories: Malware

Mal/Generic-S + Troj/Emotet-CVE (file analysis)

The Mal/Generic-S + Troj/Emotet-CVE is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Mal/Generic-S + Troj/Emotet-CVE virus can do?

Executable code extraction
Creates RWX memory
Mimics the system’s user agent string for its own requests
Expresses interest in specific running processes
The binary likely contains encrypted or compressed data.
Attempts to modify proxy settings
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Mal/Generic-S + Troj/Emotet-CVE?


File Info:
crc32: 47EF5AD3md5: f8f2431b7dc99bf1e297bbbda02f77a0name: F8F2431B7DC99BF1E297BBBDA02F77A0.mlwsha1: 1361b3b625cd8e1b7e9ecb1921d1b8e7e4467c4esha256: 5b4262195ecae33d20debecd792cd16516f28a5a483f8bfa2e262212f5ab0f91sha512: 69323dd91259d72873a43ec74d71f4ddc167bf5be5890e75e7821ef148110c00f3d015089b13da179bde8e59731962bc2b838ae542b5862511d7940977e68a19ssdeep: 3072:z9AumHNEwvb2o77hmvswQNsn/GVQp9Ee1NVev7U8glXzSXdCrcJ/il:z9AuqEcbd9mUwQNs/Ge0e1N4vuNOXn/type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Mal/Generic-S + Troj/Emotet-CVE also known as:

Elastic	malicious (high confidence)
FireEye	Generic.mg.f8f2431b7dc99bf1
CAT-QuickHeal	Trojan.Bulz
Qihoo-360	Generic/Trojan.e9f
McAfee	Emotet-FRR!F8F2431B7DC9
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Malware
K7AntiVirus	Riskware ( 0040eff71 )
BitDefender	Gen:Variant.Zusy.359046
K7GW	Trojan ( 0057530f1 )
CrowdStrike	win/malicious_confidence_100% (D)
Cyren	W32/Emotet.AZT.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:BankerX-gen [Trj]
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan-Banker.Win32.Emotet.pef
Alibaba	Trojan:Win32/EmotetCrypt.c5904bbc
ViRobot	Trojan.Win32.Emotet.185344.A
AegisLab	Trojan.Win32.Bulz.4!c
MicroWorld-eScan	Gen:Variant.Zusy.359046
Tencent	Malware.Win32.Gencirc.10ce3061
Ad-Aware	Gen:Variant.Zusy.359046
Sophos	Mal/Generic-S + Troj/Emotet-CVE
F-Secure	Trojan.TR/Crypt.Agent.wmxie
TrendMicro	TROJ_GEN.R002C0DA321
McAfee-GW-Edition	BehavesLike.Win32.Emotet.cc
Emsisoft	Gen:Variant.Zusy.359046 (B)
Ikarus	Trojan-Banker.Emotet
Jiangmin	Backdoor.Emotet.vl
Avira	TR/Crypt.Agent.wmxie
Antiy-AVL	Trojan[Backdoor]/Win32.Emotet
Microsoft	Trojan:Win32/EmotetCrypt.PEF!MTB
Gridinsoft	Trojan.Win32.Packed.oa
Arcabit	Trojan.Zusy.D57A86
ZoneAlarm	HEUR:Trojan-Banker.Win32.Emotet.pef
GData	Gen:Variant.Zusy.359046
AhnLab-V3	Trojan/Win32.Emotet.R361533
VBA32	Backdoor.Emotet
ALYac	Gen:Variant.Zusy.359046
MAX	malware (ai score=88)
Malwarebytes	Trojan.MalPack.TRE
Panda	Trj/GdSda.A
ESET-NOD32	a variant of Win32/Kryptik.HILX
TrendMicro-HouseCall	TROJ_GEN.R002C0DA321
Rising	Trojan.Emotet!1.D0E1 (CLASSIC)
SentinelOne	Static AI – Malicious PE
Fortinet	W32/Kryptik.5F2A!tr
AVG	Win32:BankerX-gen [Trj]
Paloalto	generic.ml