Malware

Mint.Zard.5 information

Malware Removal

The Mint.Zard.5 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Mint.Zard.5 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • CAPE extracted potentially suspicious content
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • CAPE detected the shellcode get eip malware family
  • Yara detections observed in process dumps, payloads or dropped files

How to determine Mint.Zard.5?


File Info:

name: 9AA07FC0AB1A732D41BE.mlw
path: /opt/CAPEv2/storage/binaries/2c84b1fc7355132d4fc7e618692dfa92e5f8fa54b957bb056c9720e686021a01
crc32: E6EF1B88
md5: 9aa07fc0ab1a732d41be500e0a3168e5
sha1: 1d46133c6828802bb0799191d8dd64b03f4ae53a
sha256: 2c84b1fc7355132d4fc7e618692dfa92e5f8fa54b957bb056c9720e686021a01
sha512: 419bbdfe7bd3eaffb5e4aff78a4123ab9b15afbc01b74638a163a3b55905f98e57aa589489a171581500eaf5ab3229d7955b1574cda91cf5f3b411d56a1a7e38
ssdeep: 6144:+G+nkT5ASJWlfW/1D0AnJReHXCN3SMH0M3jdzYVOdKsL9hDvp+:+GV+NBDsJRe3M31UCjNYspw
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T13444E1124E776456E5D227F13131BAE3ADBA2424233313DB0341EFF4BA19AC48FB5A65
sha3_384: 43cc0bcccdb22a481f04c76967123bc52e4d6d566c3ab58c511b49084c72f7d02d8256a55bf0e0662ec90fb9ea10ee6e
ep_bytes: e84e060000e978feffffcccccccccccc
timestamp: 2022-11-15 00:44:36

Version Info:

CompanyName: Adobe Systems Incorporated
FileDescription: AcroTextExtractor
FileVersion: 22.3.20282.0
LegalCopyright: Copyright 1984-2022 Adobe Systems Incorporated and its licensors. All rights reserved.
OriginalFilename: AcroTextExtractor.exe
ProductName: Adobe Acrobat text extractor for non-PDF files
ProductVersion: 22.3.20282.0
Translation: 0x0409 0x04b0

Mint.Zard.5 also known as:

BkavW32.AIDetectMalware
DrWebWin32.Beetle.2
MicroWorld-eScanGen:Variant.Mint.Zard.5
ClamAVWin.Trojan.Doina-10008191-0
FireEyeGeneric.mg.9aa07fc0ab1a732d
SkyhighBehavesLike.Win32.Ransom.dc
McAfeeArtemis!9AA07FC0AB1A
Cylanceunsafe
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 005ab4bf1 )
AlibabaTrojan:Win32/Senoval.2e4365ec
K7GWTrojan ( 005ab4bf1 )
CrowdStrikewin/malicious_confidence_100% (D)
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Patched.NKM
CynetMalicious (score: 100)
KasperskyVirus.Win32.Senoval.a
BitDefenderGen:Variant.Mint.Zard.5
NANO-AntivirusVirus.Win32.Gen-Crypt.ccnc
SUPERAntiSpywareTrojan.Agent/Gen-Doina
AvastWin32:TrojanX-gen [Trj]
RisingTrojan.Generic@AI.100 (RDML:urxmNPyPkyN5Z+JeO5i/Pw)
SophosW32/Patched-CD
F-SecureTrojan.TR/Patched.Gen
VIPREGen:Variant.Mint.Zard.5
Trapminemalicious.moderate.ml.score
EmsisoftGen:Variant.Mint.Zard.5 (B)
SentinelOneStatic AI – Suspicious PE
GDataWin32.Trojan.PSE.12S6KP6
GoogleDetected
AviraTR/Patched.Gen
MAXmalware (ai score=84)
Antiy-AVLTrojan/Win32.Patched
ArcabitTrojan.Mint.Zard.5
ZoneAlarmVirus.Win32.Senoval.a
MicrosoftTrojan:Win32/Convagent.AJ!MTB
VaristW32/Patched.GQ1.gen!Eldorado
AhnLab-V3Trojan/Win.Generic.R603332
ALYacGen:Variant.Mint.Zard.5
VBA32BScope.TrojanDownloader.Emotet
MalwarebytesGeneric.Malware.AI.DDS
TencentTrojan.Win32.Pathced_ya.16001052
IkarusTrojan.Win32.Patched
MaxSecureTrojan.Malware.121218.susgen
FortinetW32/Patched.IP!tr
AVGWin32:TrojanX-gen [Trj]
DeepInstinctMALICIOUS

How to remove Mint.Zard.5?

Mint.Zard.5 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment