Categories: Malware

Mal/Generic-S + Troj/Mocrt-A malicious file

The Mal/Generic-S + Troj/Mocrt-A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Mal/Generic-S + Troj/Mocrt-A virus can do?

Yara rule detections observed from a process memory dump/dropped files/CAPE
Dynamic (imported) function loading detected
Reads data out of its own binary image
Unconventionial language used in binary resources: Arabic (Qatar)
Authenticode signature is invalid
Attempts to remove evidence of file being downloaded from the Internet
CAPE detected the WarzoneRAT malware family
Accesses or creates Warzone RAT directories and/or files

How to determine Mal/Generic-S + Troj/Mocrt-A?


File Info:
name: 485AA72D1122385D41FD.mlwpath: /opt/CAPEv2/storage/binaries/dd39918720d7a30cce4d64ad039930bfbd9e5dc7c2293ead27fb1b56204625decrc32: 64278DB5md5: 485aa72d1122385d41fdefb74722a5e0sha1: 437ac94b491a95767bf93a2a36383af02d0c1060sha256: dd39918720d7a30cce4d64ad039930bfbd9e5dc7c2293ead27fb1b56204625desha512: 7f038274a76cc0f5c2d46830b73b73bf5a78a829e4e7fbda9e8db2d402f679b0240bbd4e3b301f53225c3d1e6dbe4b902d87e3bf61dd9e2c649e90ff9d7cd415ssdeep: 1536:h0jP7/L1B5rVmN8sxHv2M28ix8EUaJxWZoB4u0OVE01g:K1VmhaH8EFvW+0OVE0type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T106B39E13F7E54835F3B201B01ABD7E7ACBEDF9700628C49FA394858A2D31946E925397sha3_384: 08594fe32dd90b2a03078dfc85f3c974b3e43fc06bb3a353ed51ecde689fa64b04a221815d95b1c0dbfbf2235c5cdabfep_bytes: 558bec83ec4456ff15e84141008bc88atimestamp: 2020-08-29 06:54:20
Version Info:
0: [No Data]

Mal/Generic-S + Troj/Mocrt-A also known as:

Bkav	W32.AndrneLM.Trojan
Lionic	Trojan.Win32.Agentb.trG2
Elastic	malicious (high confidence)
DrWeb	Trojan.PWS.Maria.3
MicroWorld-eScan	Trojan.GenericKD.38202727
CAT-QuickHeal	Trojan.GenericRI.S22016029
ALYac	Trojan.GenericKD.38202727
Cylance	Unsafe
Zillya	Trojan.Agent.Win32.1391531
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 0054d10e1 )
Alibaba	Malware:Win32/km_2ec7e.None
K7GW	Trojan ( 0054d10e1 )
CrowdStrike	win/malicious_confidence_100% (W)
Arcabit	Trojan.Generic.D246ED67
BitDefenderTheta	Gen:NN.ZexaF.34084.hyW@aC46ikhi
VirIT	Trojan.Win32.PSWStealer.CPI
Cyren	W32/Antiav.INDT-0919
Symantec	Infostealer
ESET-NOD32	Win32/Agent.TJS
APEX	Malicious
Paloalto	generic.ml
ClamAV	Win.Malware.AveMaria-8799014-1
Kaspersky	Trojan.Win32.Agentb.jiad
BitDefender	Trojan.GenericKD.38202727
NANO-Antivirus	Trojan.Win32.AntiAV.fljpfv
Avast	Win32:Malware-gen
Tencent	Malware.Win32.Gencirc.10ce4ea1
Ad-Aware	Trojan.GenericKD.38202727
Emsisoft	Trojan.Agent (A)
Comodo	TrojWare.Win32.AntiAV.VA@81mmki
TrendMicro	TrojanSpy.Win32.MOCRT.SM
McAfee-GW-Edition	BehavesLike.Win32.Ransomware.ch
FireEye	Generic.mg.485aa72d1122385d
Sophos	Mal/Generic-S + Troj/Mocrt-A
Ikarus	Trojan-Spy.AveMaria
Jiangmin	Trojan.Agentb.eab
Avira	TR/Redcap.ghjpt
MAX	malware (ai score=100)
Antiy-AVL	Trojan/Generic.ASMalwS.2A11D98
Kingsoft	Win32.Heur.KVMH017.a.(kcloud)
Gridinsoft	Trojan.Win32.Agent.oa!s1
Microsoft	Backdoor:Win32/Remcos!MTB
ViRobot	Trojan.Win32.Agent.1392640.E
GData	Win32.Backdoor.AveMaria.A
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.AveMaria.R263895
McAfee	GenericRXLJ-HT!485AA72D1122
TACHYON	Trojan/W32.WarzoneRat.115712
VBA32	TrojanPSW.Maria
Malwarebytes	Backdoor.AveMaria
TrendMicro-HouseCall	TrojanSpy.Win32.MOCRT.SM
Rising	Stealer.AveMaria!1.BA1C (CLASSIC)
Yandex	Trojan.GenAsa!++8lN4UW0KE
SentinelOne	Static AI – Malicious PE
eGambit	Trojan.Generic
Fortinet	W32/Agent.TJS!tr
AVG	Win32:Malware-gen
Cybereason	malicious.d11223
Panda	Trj/Genetic.gen