Categories: Malware

ML/PE-A + Mal/BlackMat-A (file analysis)

The ML/PE-A + Mal/BlackMat-A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What ML/PE-A + Mal/BlackMat-A virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (2 unique times)
Creates RWX memory
Performs some HTTP requests
The binary likely contains encrypted or compressed data.
Attempts to stop active services
Exhibits possible ransomware file modification behavior
Writes a potential ransom message to disk
Attempts to modify proxy settings
Collects information to fingerprint the system

Related domains:

paymenthacks.com

apps.identrust.com

How to determine ML/PE-A + Mal/BlackMat-A?


File Info:
crc32: 9C7D1E1Fmd5: b07ff2183904731e4905b1bc1e23d24ename: B07FF2183904731E4905B1BC1E23D24E.mlwsha1: 3fe14bbf67d25bfa3b9d06f5f1fc7812aa28a687sha256: 3a03530c732ebe53cdd7c17bee0988896d36c2b632dbd6118613697c2af82117sha512: e7774b76759952979bac48a5f1a24808d957181d5720393f16cfb6af054253a47fd63c9f068203eb2433ff768979c59043f9f4a52cf734f375583ddaba478c4dssdeep: 768:TOdT6nmM1SJbpRP4EBg6AXTOJvFQ9z8CYI3j3i4O7D:Cdmnvgd4EeszQxXYImtype: MS-DOS executable, MZ for MS-DOS
Version Info:
0: [No Data]

ML/PE-A + Mal/BlackMat-A also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Trojan ( 005887fa1 )
Lionic	Trojan.Win32.Generic.4!c
Elastic	malicious (high confidence)
DrWeb	Trojan.Encoder.34410
Cynet	Malicious (score: 100)
CAT-QuickHeal	Ransom.Blackmatter
ALYac	Trojan.Ransom.BlackMatter
Cylance	Unsafe
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Ransom:Win32/BlackMatter.28b60761
K7GW	Trojan ( 005887fa1 )
Cybereason	malicious.839047
ESET-NOD32	a variant of Win32/Filecoder.BlackMatter.A
APEX	Malicious
Avast	FileRepMalware
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Barys.57542
MicroWorld-eScan	Gen:Variant.Barys.57542
Tencent	Win32.Trojan.Filecoder.Pdch
Ad-Aware	Gen:Variant.Barys.57542
Sophos	ML/PE-A + Mal/BlackMat-A
BitDefenderTheta	Gen:NN.ZexaF.34236.biqaaO2RNWh
TrendMicro	Ransom_BlackMatter.R002C0DJ521
McAfee-GW-Edition	BehavesLike.Win32.Generic.nc
FireEye	Generic.mg.b07ff2183904731e
Emsisoft	Gen:Variant.Barys.57542 (B)
SentinelOne	Static AI – Malicious PE
Avira	TR/Crypt.ZPACK.Gen
eGambit	Unsafe.AI_Score_99%
Antiy-AVL	Trojan/Generic.ASMalwS.34BA135
Microsoft	Ransom:Win32/BlackMatter.MAK!MTB
Arcabit	Trojan.Barys.DE0C6
GData	Gen:Variant.Barys.57542
Acronis	suspicious
McAfee	Artemis!B07FF2183904
MAX	malware (ai score=83)
VBA32	Trojan.Tiggre
Malwarebytes	Ransom.BlackMatter
Panda	Trj/CI.A
TrendMicro-HouseCall	Ransom_BlackMatter.R002C0DJ521
Yandex	Packed/MPress
Ikarus	Trojan-Ransom.BlackMatter
MaxSecure	Trojan.Malware.7164915.susgen
Fortinet	W32/BlackMat.A!tr.ransom
AVG	FileRepMalware
Paloalto	generic.ml