Strictor.257617 (file analysis)

The Strictor.257617 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Strictor.257617 virus can do?

Executable code extraction
Creates RWX memory
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Strictor.257617?


File Info:
crc32: BC39535B
md5: fe83348f117676ef2b48dbc6dbf648bc
name: FE83348F117676EF2B48DBC6DBF648BC.mlw
sha1: 28399222e3327c9287e25d8e51959dd7320e6393
sha256: df9e1549d1c459f47a9094f615ef8dab507c3c4f0f2c337334e90cc0d08f4967
sha512: 4bdfb9ea53f9013dfc46daf9d7fbed9a624c7129ccf742a80259c3730d09e0005f9ee39ad832a5c4c22399a421a3dca0bfda04151726f97da0e95eb78b96576e
ssdeep: 24576:mbMC01V2ncw7ZZouUDSk24MAijr2kG47ajxb9FukxVwo/v6dc:lN1V2ncwdOt65jZa9b3D6
type: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, PECompact2 compressed

Version Info:
: 
OriginalFilename: uninstall.exe
FileDescription: Uninstall Dirf 2017 - Declaraxe7xe3o do Imposto sobre a Renda Retido na Fonte 1.9
Translation: 0x0409 0x04b0

Strictor.257617 also known as:

Lionic	Trojan.Win32.Kykymber.lmDX
Elastic	malicious (high confidence)
ALYac	Gen:Variant.Strictor.257617
Zillya	Tool.PEMalform.Win32.86
CrowdStrike	win/malicious_confidence_60% (D)
Alibaba	RiskWare:Win32/PEMalform.6e8db284
K7GW	Trojan ( 0057f6e41 )
K7AntiVirus	Trojan ( 0057f6e41 )
Cyren	W32/Risk.PBUN-8580
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/RiskWare.PEMalform.B
APEX	Malicious
Avast	Win32:Malware-gen
BitDefender	Gen:Variant.Strictor.257617
NANO-Antivirus	Trojan.Win32.Delf.fjgbxe
MicroWorld-eScan	Gen:Variant.Strictor.257617
Tencent	Win32.Trojan.Razy.Egnz
Ad-Aware	Gen:Variant.Strictor.257617
Sophos	Generic ML PUA (PUA)
BitDefenderTheta	Gen:NN.ZexaF.34170.Fj3@a4vAvBdi
VIPRE	LooksLike.Win32.InfectedFile!A (v)
McAfee-GW-Edition	BehavesLike.Win32.Dropper.tc
FireEye	Gen:Variant.Strictor.257617
Emsisoft	Gen:Variant.Strictor.257617 (B)
SentinelOne	Static AI – Suspicious PE
Antiy-AVL	Trojan/Generic.ASMalwS.A0D566
Microsoft	Program:Win32/Wacapew.C!ml
GData	Win32.Trojan.PSE.1JIDS6Q
McAfee	Artemis!FE83348F1176
MAX	malware (ai score=89)
VBA32	Trojan.Wacatac
Malwarebytes	Generic.Trojan.Banker.DDS
Rising	Packer.Win32.Crypt.eg (CLASSIC)
Yandex	RiskWare.PEMalform!QHbSoL9IKh8
Ikarus	PUA.RiskWare.PEMalform
Fortinet	W32/Onlinegames.ASE!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml

How to remove Strictor.257617?

Strictor.257617 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X