Malware

About “Strictor.240222” infection

Malware Removal

The Strictor.240222 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Strictor.240222 virus can do?

  • Executable code extraction
  • Injection (inter-process)
  • Injection (Process Hollowing)
  • Creates RWX memory
  • Executed a process and injected code into it, probably while unpacking
  • Deletes its original binary from disk
  • Attempts to repeatedly call a single API many times in order to delay analysis time
  • Steals private information from local Internet browsers
  • Creates a hidden or system file
  • Creates a copy of itself
  • Harvests credentials from local FTP client softwares
  • Harvests information related to installed instant messenger clients
  • Harvests information related to installed mail clients
  • Collects information to fingerprint the system
  • Anomalous binary characteristics

Related domains:

mecharnise.ir

How to determine Strictor.240222?


File Info:

crc32: 226C629D
md5: f3a734d77b0e5aa7475b4f8cf37291c8
name: cafilez.exe
sha1: a81775e59a10f5d1f874f965336aa12673cd1027
sha256: da89424e13e3a7a6aed76e2092b4aa2bb8e302d7dd2ddf3f51bf7a9975c36b69
sha512: 66678f37cc20e171d1d267db5d05fd55c587a268a2d8713961d5940b180faf445f39aea21d6817a94c9f830cc2efd265281ad2a7e066f1a24297071927e06ad7
ssdeep: 12288:UFZWSKvGUM32g4fX2B5aSzEH9C84qVRsJOBeJx4CfQhEd8rBNGG1Vx2Njqtj0w8l:ADKHi/4fRScs8ty/J+CQhRBNdVxsqM
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

Strictor.240222 also known as:

MicroWorld-eScanGen:Variant.Strictor.240222
FireEyeGeneric.mg.f3a734d77b0e5aa7
SangforMalware
K7AntiVirusRiskware ( 0040eff71 )
BitDefenderGen:Variant.Strictor.240222
Cybereasonmalicious.59a10f
TrendMicroTROJ_FRS.0NA104BD20
F-ProtW32/Fareit.JK.gen!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
GDataGen:Variant.Strictor.240222
KasperskyHEUR:Trojan.Win32.Kryptik.gen
Ad-AwareGen:Variant.Strictor.240222
EmsisoftGen:Variant.Strictor.240222 (B)
DrWebTrojan.PWS.AgenslaNET.1
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.Fareit.dh
SentinelOneDFI – Suspicious PE
CyrenW32/Fareit.JK.gen!Eldorado
WebrootW32.Trojan.Gen
MAXmalware (ai score=86)
Endgamemalicious (high confidence)
ArcabitTrojan.Strictor.D3AA5E
SUPERAntiSpywareTrojan.Agent/Gen-Dropper
ZoneAlarmHEUR:Trojan.Win32.Kryptik.gen
MicrosoftTrojan:Win32/Wacatac.D!ml
AhnLab-V3Win-Trojan/Delphiless02.Exp
McAfeeFareit-FRB!F3A734D77B0E
MalwarebytesTrojan.MalPack.DLF
PandaTrj/Agent.AJS
ESET-NOD32a variant of Win32/Injector.EKNJ
TrendMicro-HouseCallTROJ_FRS.0NA104BD20
RisingMalware.Heuristic!ET#83% (RDMK:cmRtazqJOzsOGhXW4q/mWYht4fUE)
FortinetW32/Injector.EEHO!tr
BitDefenderThetaGen:NN.ZelphiF.34090.6GW@aS7idTli
Paloaltogeneric.ml

How to remove Strictor.240222?

Strictor.240222 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment