ML/PE-A + Mal/Slenfbot-G (file analysis)

The ML/PE-A + Mal/Slenfbot-G is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What ML/PE-A + Mal/Slenfbot-G virus can do?

Executable code extraction
Creates RWX memory
A process attempted to delay the analysis task.
Drops a binary and executes it
The binary likely contains encrypted or compressed data.
Creates an autorun.inf file
Uses Windows utilities for basic functionality
Sniffs keystrokes
A process was set to shut the system down when terminated
Installs itself for autorun at Windows startup
Creates a hidden or system file
Creates a copy of itself
Collects information to fingerprint the system
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

8.tcp.ngrok.io

How to determine ML/PE-A + Mal/Slenfbot-G?


File Info:
crc32: CF664B8D
md5: 16975d1a6014294f38cdc5f3c311aa7c
name: 16975D1A6014294F38CDC5F3C311AA7C.mlw
sha1: f24799c9139a73851735f917cc35e557f9d945e5
sha256: 28c85e08e2525f6d87faa5adb0982a395e165a71e21703bb0166aa5fdd72c54c
sha512: 5e6a6f133d42550d37937ef598d166ee2cd533d2ad35d84931d033bb312baec79fc861d20653cc50bf3e0f2fade2a718436f8ecf4b2d891d2ed9a3acb03dfc03
ssdeep: 3072:DR8EC2Oi8NXC797F8TBfFvj4bq575LKaMx2PHlftYbxaUuxYlkqZUNkc:DhC2F8NXC796TB9vj485LlMx2Pkdmo/W
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

ML/PE-A + Mal/Slenfbot-G also known as:

Bkav	W32.AIDetect.malware1
K7AntiVirus	Trojan ( 0053b4521 )
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
CAT-QuickHeal	Trojan.MSILCryptor.MUE.A4
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_90% (D)
K7GW	Trojan ( 0053b4521 )
Cybereason	malicious.9139a7
Cyren	W32/Slenfbot.B.gen!Eldorado
ESET-NOD32	a variant of MSIL/Bladabindi.LX
APEX	Malicious
Kaspersky	HEUR:Trojan.Win32.Generic
SUPERAntiSpyware	Trojan.Agent/Gen-Slenfbot
Sophos	ML/PE-A + Mal/Slenfbot-G
BitDefenderTheta	Gen:NN.ZexaF.34686.pqW@aae9XWj
McAfee-GW-Edition	BehavesLike.Win32.Ransomware.dc
FireEye	Generic.mg.16975d1a6014294f
SentinelOne	Static AI – Malicious PE
Avira	BDS/Backdoor.Gen
Microsoft	Trojan:Script/Phonzy.A!ml
ZoneAlarm	HEUR:Trojan.MSIL.Crypt.gen
AhnLab-V3	Trojan/Win32.Generic.C209514
Acronis	suspicious
Malwarebytes	Trojan.Facebook
Rising	Backdoor.Bladabindi!8.B1F (RDMK:cmRtazrL5jwrv1UVdxe+j2JjwH46)
Ikarus	Trojan-Crypt.Xpack
MaxSecure	Trojan.Malware.300983.susgen

How to remove ML/PE-A + Mal/Slenfbot-G?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

ML/PE-A + Mal/Slenfbot-G (file analysis)