Malware

Mal/RisePro-A information

Malware Removal

The Mal/RisePro-A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Mal/RisePro-A virus can do?

  • Sample contains Overlay data
  • Unconventionial language used in binary resources: Russian
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Anomalous binary characteristics

How to determine Mal/RisePro-A?


File Info:

name: 592FF2ED3ACBBC35BDDF.mlw
path: /opt/CAPEv2/storage/binaries/e890d8c2194e4274e973a8424c48ab91ad8e7aa7b7f12639ee4344011c9c8827
crc32: 569B6599
md5: 592ff2ed3acbbc35bddfe11d6e1ebe56
sha1: 2894e91cc2126fa0c17df59b47f03cc3ac7bc6a7
sha256: e890d8c2194e4274e973a8424c48ab91ad8e7aa7b7f12639ee4344011c9c8827
sha512: cc492d52db917c1c25ed461c15d7b3d79e3b004271c6609ad369281a8596e6edf5f08a01c9357b3d6e4b0ab8c822ae3d0f91b1014c009cdfe1e9c0021a4bcef6
ssdeep: 12288:w8Y7vhuPTZdconevV8213hGMMO1OY/efXN8h8QETFWVrRr0VbEgo7P:65unc+2pgMMO1N/CXNoEpWVrCVbq7
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T19ED423FF541CBBB8C0EFEEB92129D9563E8EDB2BA324DEEE0551514418AC0B37439254
sha3_384: 886de48972dd4f265c672d73b0a7107234eded07620d35d59aa42d6fd09e920c67a95619623036e00c0b881c716fdba0
ep_bytes:
timestamp: 2024-02-01 11:29:07

Version Info:

0: [No Data]

Mal/RisePro-A also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Generic.4!c
FireEyeGeneric.mg.592ff2ed3acbbc35
MalwarebytesMachineLearning/Anomalous.100%
SangforTrojan.Win32.Save.a
APEXMalicious
SophosMal/RisePro-A
Trapminemalicious.high.ml.score
Antiy-AVLTrojan[Packed]/Win32.Enigma
Kingsoftmalware.kb.b.882
XcitiumHeur.Corrupt.PE@1z141z3
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
GoogleDetected
Cylanceunsafe
ZonerProbably Heur.ExeHeaderL
RisingTrojan.Generic@AI.100 (RDML:ipYbH0W3hGTfZyYI6oubhg)
SentinelOneStatic AI – Malicious PE
FortinetW32/PossibleThreat
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Mal/RisePro-A?

Mal/RisePro-A removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment