Malware

What is “Python/ShellCode.X”?

Malware Removal

The Python/ShellCode.X is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Python/ShellCode.X virus can do?

  • Authenticode signature is invalid

How to determine Python/ShellCode.X?


File Info:

name: EF3E825977499A07F36A.mlw
path: /opt/CAPEv2/storage/binaries/fbcbfa01b8bcbc51dc9b78a9b0d7be2c6baa05b3074cee7b918557a520bfd66a
crc32: 17EFECA2
md5: ef3e825977499a07f36a76134fb27444
sha1: 4194c931c63651c74463f3c5cd31da0e752258ed
sha256: fbcbfa01b8bcbc51dc9b78a9b0d7be2c6baa05b3074cee7b918557a520bfd66a
sha512: 4d9d650130634459a2797d4fe0f2bc8cafe88ab445ccb59b3723ecfc050811221d5ea57a39dad6de471e5a1e3bf796616c2e2969bf2a547a5d38f6099706c8d9
ssdeep: 768:3zj+54XZufzYJEV04ArzKvfBa3xwPnD/8hJ5//Tt+QTHuwf8UMIHuY:m5Jz7VSfuPn4h1+Q6wkU
type: PE32+ executable (console) x86-64, for MS Windows
tlsh: T14713E51B5BA504E0F95AE538E973054BE2727D532F2DA2DF022872760F73CC52C7AA49
sha3_384: 971e29b83b4f7fe2dacede46678526ff55fd7adcab9b1e896777386e8d129196df9ca3cb5632e3f73c4d1fea3489073f
ep_bytes: 4883ec28e8d70300004883c428e972fe
timestamp: 2022-07-03 21:55:38

Version Info:

0: [No Data]

Python/ShellCode.X also known as:

Elasticmalicious (high confidence)
ESET-NOD32Python/ShellCode.X
JiangminTrojan.PSW.Disco.els
MicrosoftTrojan:Win32/Sabsik.TE.A!ml
RisingBackdoor.CobaltStrike!1.D9A1 (CLASSIC)

How to remove Python/ShellCode.X?

Python/ShellCode.X removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment