Mint.Zard.5 (file analysis)

The Mint.Zard.5 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Mint.Zard.5 virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• CAPE detected the shellcode get eip malware family
• Deletes executed files from disk
• Yara detections observed in process dumps, payloads or dropped files

How to determine Mint.Zard.5?

File Info:
name: 57CF5635657FA996CD91.mlw
path: /opt/CAPEv2/storage/binaries/4c659b5a48a6203ef5a51a60d58b0b905846f68f9ed3431ae20a79c267e552a9
crc32: E923D2FF
md5: 57cf5635657fa996cd913307813cbc49
sha1: 32f45099b62984a94a5d8995380743c01fd7eb2e
sha256: 4c659b5a48a6203ef5a51a60d58b0b905846f68f9ed3431ae20a79c267e552a9
sha512: 5b4da33d1c9ee1b1baf249d9d6804ce6288363243dc9e510acc461a16f16ee7f82dd2bc506c734e7c87e5c09a21f04ff0858ad914f5f592815bfc4b3fd095d6e
ssdeep: 12288:wcvgLARDI1KIOzORLca8RnUKiFjtLLKP2apXQ7+9:wc40RDI1pEXRUKiLLCdq+
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T146B4F14125E6C23FD5F0D7316AE3522216BBBC505C79A32E53C21E8A6E357CA74B6323
sha3_384: ca63ef59c2606f18fb26c824f38b82d5c72fc9949a531640180c4bfd192545308859b5615e76d75230d0242332af678f
ep_bytes: 558bec83ec4456ff155c1100018bf08a
timestamp: 2001-08-17 12:44:39

Version Info:
CompanyName: Microsoft Corporation
FileDescription: DirectX 9.0 Web setup
FileVersion: 9.29.1974.0
InternalName: DXWebSetup
LegalCopyright: Copyright (c) Microsoft Corporation. All rights reserved.
OriginalFilename: dxwebsetup.exe
ProductName: Microsoft® Windows® Operating System
ProductVersion: 9.29.1974.0
Translation: 0x0409 0x04b0

Mint.Zard.5 also known as:

How to remove Mint.Zard.5?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.