Strictor.178970 (file analysis)

The Strictor.178970 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Strictor.178970 virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid
Anomalous .NET characteristics

How to determine Strictor.178970?


File Info:
name: C4DDAC57CBDFFCB1D61D.mlw
path: /opt/CAPEv2/storage/binaries/c3c91ab37e5c2eeedc310b2520d56ade0cd6d7cd04300f774295f98872092493
crc32: 593703D4
md5: c4ddac57cbdffcb1d61da6e979eaf3e5
sha1: 72d97741ea4bd866a018feef1c14a81c950da907
sha256: c3c91ab37e5c2eeedc310b2520d56ade0cd6d7cd04300f774295f98872092493
sha512: c77ce15f4b2623cffb957eeeb2266cc6fb50834a61fea31e1ba58ecb7974c26f172a5f50fc1e0cc045224bfb60be1a5baed474287ea0cd77da0e22f44109b589
ssdeep: 96:/WBk3u0gTGoiMM2WUp+ccE2dZYlnlYJnLLPL0KffLThCAJv1VRXmm5FpH/XrEUkC:/WBk34bmVdsnlYJLLLTT7PaUpbdEClU
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1BC32A55EE7A66DF5EE2B03722C738C632F11E502D5EA6FBF1484A2270C6210544B7DA7
sha3_384: ac59c7d9322628a431106fc3d4e4ea7c4c495743b7cbbd813e090e16578884be514d1bbe62d68a7fa723b115e62a8ff0
ep_bytes: ff250020400000000000000000000000
timestamp: 2023-10-07 16:26:05

Version Info:
Translation: 0x0000 0x04b0
CompanyName: IlCIvgp
FileDescription:  
FileVersion: 0.0.0.0
InternalName: Killer_T_-_Nyika_Yese_(_Dance_mix).mp3.exe
LegalCopyright:  
OriginalFilename: Killer_T_-_Nyika_Yese_(_Dance_mix).mp3.exe
ProductVersion: 0.0.0.0
Assembly Version: 0.0.0.0

Strictor.178970 also known as:

Lionic	Trojan.Win32.Starter.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Strictor.178970
FireEye	Generic.mg.c4ddac57cbdffcb1
CAT-QuickHeal	Trojan.Starter
Skyhigh	GenericRXBF-TJ!C4DDAC57CBDF
ALYac	Gen:Variant.Strictor.178970
Malwarebytes	Backdoor.RevengeRAT
VIPRE	Gen:Variant.Strictor.178970
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Trojan ( 00581bc61 )
BitDefender	Gen:Variant.Strictor.178970
K7GW	Trojan ( 00581bc61 )
CrowdStrike	win/malicious_confidence_100% (W)
BitDefenderTheta	Gen:NN.ZemsilF.36792.am0@aevmU0k
VirIT	Trojan.Win32.Starter.LIU
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Starter.FD
Cynet	Malicious (score: 100)
APEX	Malicious
Kaspersky	Trojan.MSIL.Starter.dq
Alibaba	Trojan:MSIL/Starter.1faf83bd
NANO-Antivirus	Trojan.Win32.Starter.kcwzcy
ViRobot	Trojan.Win.Z.Starter.11264.ALL
Rising	Trojan.Starter/MSIL!1.B6BB (CLOUD)
TACHYON	Trojan/W32.DN-Starter.11264.AU
Sophos	Troj/MSIL-LIX
F-Secure	Heuristic.HEUR/AGEN.1308689
DrWeb	Trojan.Starter.7664
TrendMicro	TROJ_GEN.R03BC0DJV23
Trapmine	suspicious.low.ml.score
Emsisoft	Gen:Variant.Strictor.178970 (B)
Ikarus	Trojan.MSIL.Starter
Webroot	W32.Trojan.Gen
Varist	W32/MSIL_Troj.OR.gen!Eldorado
Avira	HEUR/AGEN.1308689
Kingsoft	malware.kb.c.1000
Microsoft	Trojan:MSIL/Starter.J!ibt
Xcitium	TrojWare.MSIL.Starter.BKP@7ewwu8
Arcabit	Trojan.Strictor.D2BB1A
ZoneAlarm	Trojan.MSIL.Starter.dq
GData	MSIL.Trojan.PSE.13060VR
Google	Detected
AhnLab-V3	Trojan/Win.Starter.C4765244
MAX	malware (ai score=83)
DeepInstinct	MALICIOUS
Cylance	unsafe
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_GEN.R03BC0DJV23
Tencent	Trojan.Msil.Agent.zaz
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Starter.BK!tr
AVG	Win32:TrojanX-gen [Trj]
Avast	Win32:TrojanX-gen [Trj]

How to remove Strictor.178970?

Strictor.178970 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X