Categories: Malware

Strictor.142521 malicious file

The Strictor.142521 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Strictor.142521 virus can do?

Executable code extraction
Attempts to connect to a dead IP:Port (2 unique times)
Creates RWX memory
Reads data out of its own binary image
Performs some HTTP requests
The executable is compressed using UPX
Uses Windows utilities for basic functionality
Creates a hidden or system file
Attempts to modify proxy settings

Related domains:

z.whorecord.xyz

a.tomx.xyz

urinate.unregular.ru

ec2-54-154-5-3.eu-west-1.compute.amazonaws.com

www.bing.com

How to determine Strictor.142521?


File Info:
crc32: FA754E9Fmd5: d9b607128d5f1f57ae7d3aa0e0baacfdname: D9B607128D5F1F57AE7D3AA0E0BAACFD.mlwsha1: 174001688b22082983ca8423d48c13e4d68a886asha256: f93544a859f6db6ba13219e5b31b4c0a099eb30566a8d799a509024ad0e21631sha512: 7b5584aa507dc2d9878c5a4d5463b82dc9d598a7a6d93785bba9b25cf5deb9e65bf9cc727aed852b2a7bb557cbf6dbb8d6f8ac712057c43105bce91581433588ssdeep: 12288:QGkVmLnAns3dVnxYTx3YVh/VlxVVH5EkrGTruml5RYlrlNFrhQ:QGkVmLnAns3dVnxYTx3YVh/VlxVVH5Entype: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
Version Info:
LegalCopyright: nLegalInternalName: vInternalFileVersion: 14.230.230.10CompanyName: xPabloProductName: fNameProductVersion: 123.120.110.10FileDescription: cPicassoOriginalFilename: mOriginalTranslation: 0x0800 0x04b0

Strictor.142521 also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Strictor.142521
FireEye	Generic.mg.d9b607128d5f1f57
CAT-QuickHeal	Adware.Dataric.A5
ALYac	Gen:Variant.Strictor.142521
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Malware
K7AntiVirus	Trojan-Downloader ( 005147ee1 )
BitDefender	Gen:Variant.Strictor.142521
K7GW	Trojan-Downloader ( 005134e71 )
Cybereason	malicious.28d5f1
Cyren	W32/TOVus.A.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	FileRepMetagen [PUP]
Kaspersky	not-a-virus:HEUR:AdWare.Win32.Generic
NANO-Antivirus	Trojan.Win32.InstMonster.ermipw
Ad-Aware	Gen:Variant.Strictor.142521
Emsisoft	Gen:Variant.Strictor.142521 (B)
Comodo	Application.Win32.InstallMonster.BW@7e3x2m
F-Secure	Adware.ADWARE/InstMonster.Gen7
DrWeb	Trojan.DownLoader25.14861
Zillya	Downloader.Tovkater.Win32.260
TrendMicro	HT_TOVKATER_GG31089C.UVPM
McAfee-GW-Edition	BehavesLike.Win32.Generic.hh
MaxSecure	Win.MxResIcn.Heur.Gen
Sophos	Generic PUA BH (PUA)
SentinelOne	Static AI – Malicious PE – Downloader
Jiangmin	AdWare.Generic.hmfr
Avira	ADWARE/InstMonster.Gen7
MAX	malware (ai score=88)
Antiy-AVL	GrayWare[AdWare]/Win32.AGeneric
Microsoft	Trojan:Win32/Wacatac.A!ml
Arcabit	Trojan.Strictor.D22CB9
SUPERAntiSpyware	Adware.InstallMonster/Variant
ZoneAlarm	not-a-virus:HEUR:AdWare.Win32.Generic
GData	Gen:Variant.Strictor.142521
Cynet	Malicious (score: 90)
AhnLab-V3	PUP/Win32.InstMonster.R205788
McAfee	GenericRXAA-AA!D9B607128D5F
VBA32	BScope.Trojan.Downloader
Malwarebytes	Generic.Trojan.Malicious.DDS
Panda	Trj/Genetic.gen
ESET-NOD32	a variant of Win32/TrojanDownloader.Tovkater.BT
TrendMicro-HouseCall	HT_TOVKATER_GG31089C.UVPM
Rising	Downloader.Tovkater!8.E5CE (TFE:5:ooeEv0JepeL)
Yandex	Trojan.GenAsa!oEIUVCsWqrs
Ikarus	Trojan-Downloader.Win32.Tovkater
Fortinet	W32/Tovkater.CD!tr.dldr
BitDefenderTheta	Gen:NN.ZexaF.34804.FmMfaKq@gpgG
AVG	FileRepMetagen [PUP]
Paloalto	generic.ml
CrowdStrike	win/malicious_confidence_100% (D)
Qihoo-360	Win32/Trojan.Dropper.c9f