ML/PE-A + Troj/Thanos-A (file analysis)

The ML/PE-A + Troj/Thanos-A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What ML/PE-A + Troj/Thanos-A virus can do?

How to determine ML/PE-A + Troj/Thanos-A?


File Info:
crc32: 621D4476
md5: 71bd7a49a092452a5ccc24dd9ee1df1e
name: 71BD7A49A092452A5CCC24DD9EE1DF1E.mlw
sha1: f65636c5727f5f9da8b60e79d31a866711cc029a
sha256: cbe82df60bb0dfd79f73daf59231727707e3a1ce8c8ba56a5d98e32d44aed4f5
sha512: 733fe4c4962110dfcc117543b1dad34c5dc647e94135857ee318881b9f08a055c7f6bbc2ce5340798b874e400b3945b919f60f13e141132742513d6f5fca8091
ssdeep: 1536:SXMLuZQG3KJ3QaIH9shR4fZcvr4C9u3MTIdD9mtthd9JovrgmqhtvM4CoLT6QPb:UMLuZraJ3a0ehcvv9sM+9mtthd0gmWk
type: PE32+ executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright:  
Assembly Version: 0.0.0.0
InternalName: Final-02.exe.bin
FileVersion: 0.0.0.0
ProductVersion: 0.0.0.0
FileDescription:  
OriginalFilename: Final-02.exe.bin

ML/PE-A + Troj/Thanos-A also known as:

K7AntiVirus	Riskware ( 0040eff71 )
Elastic	malicious (high confidence)
DrWeb	Trojan.Siggen9.59066
ClamAV	Win.Ransomware.Thanos-9755595-0
CAT-QuickHeal	Ransom.Thanos.S16459555
ALYac	Trojan.Ransom.Thanos
Malwarebytes	Trojan.Crypt.MSIL.Generic
Zillya	Trojan.Agent.Win32.1350363
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
BitDefender	Trojan.GenericKD.34760791
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.9a0924
Cyren	W64/Trojan.FOOB-6828
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Cynet	Malicious (score: 99)
Kaspersky	HEUR:Trojan-Ransom.MSIL.Thanos.gen
Alibaba	Ransom:MSIL/Thanos.053175af
NANO-Antivirus	Trojan.Win64.DelShad.ioisuh
MicroWorld-eScan	Trojan.GenericKD.34760791
Tencent	Malware.Win32.Gencirc.11b9f90f
Ad-Aware	Trojan.GenericKD.34760791
Sophos	ML/PE-A + Troj/Thanos-A
F-Secure	Heuristic.HEUR/AGEN.1140759
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Ransom.MSIL.THANOS.AA
McAfee-GW-Edition	Ransom-Thanos!71BD7A49A092
FireEye	Trojan.GenericKD.34760791
Emsisoft	Trojan.GenericKD.34760791 (B)
SentinelOne	Static AI – Malicious PE
Avira	HEUR/AGEN.1140759
eGambit	Unsafe.AI_Score_87%
Antiy-AVL	Trojan/Generic.ASMalwS.30B53D7
Microsoft	Ransom:MSIL/Thanos.AR!MSR
Arcabit	Trojan.Generic.D2126857
AegisLab	Trojan.MSIL.DelShad.4!c
ZoneAlarm	HEUR:Trojan-Ransom.MSIL.Thanos.gen
GData	Trojan.GenericKD.34760791
AhnLab-V3	Malware/Win32.RL_Generic.C4192539
McAfee	Ransom-Thanos!71BD7A49A092
MAX	malware (ai score=100)
VBA32	Trojan.MSIL.DelShad
Panda	Trj/CI.A
TrendMicro-HouseCall	Ransom.MSIL.THANOS.AA
Rising	Trojan.AntiVM!1.CF63 (CLASSIC)
Yandex	Trojan.Agent!zOSMBOZjYHU
Ikarus	Trojan.MSIL.Agent
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/DelShad.R002C0DJG20!tr
Paloalto	generic.ml

How to remove ML/PE-A + Troj/Thanos-A?

ML/PE-A + Troj/Thanos-A removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X