Categories: Malware

Strictor.257617 (file analysis)

The Strictor.257617 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Strictor.257617 virus can do?

Executable code extraction
Creates RWX memory
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Strictor.257617?


File Info:
crc32: BC39535Bmd5: fe83348f117676ef2b48dbc6dbf648bcname: FE83348F117676EF2B48DBC6DBF648BC.mlwsha1: 28399222e3327c9287e25d8e51959dd7320e6393sha256: df9e1549d1c459f47a9094f615ef8dab507c3c4f0f2c337334e90cc0d08f4967sha512: 4bdfb9ea53f9013dfc46daf9d7fbed9a624c7129ccf742a80259c3730d09e0005f9ee39ad832a5c4c22399a421a3dca0bfda04151726f97da0e95eb78b96576essdeep: 24576:mbMC01V2ncw7ZZouUDSk24MAijr2kG47ajxb9FukxVwo/v6dc:lN1V2ncwdOt65jZa9b3D6type: PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, PECompact2 compressed
Version Info:
: OriginalFilename: uninstall.exeFileDescription: Uninstall Dirf 2017 - Declaraxe7xe3o do Imposto sobre a Renda Retido na Fonte 1.9Translation: 0x0409 0x04b0

Strictor.257617 also known as:

Lionic	Trojan.Win32.Kykymber.lmDX
Elastic	malicious (high confidence)
ALYac	Gen:Variant.Strictor.257617
Zillya	Tool.PEMalform.Win32.86
CrowdStrike	win/malicious_confidence_60% (D)
Alibaba	RiskWare:Win32/PEMalform.6e8db284
K7GW	Trojan ( 0057f6e41 )
K7AntiVirus	Trojan ( 0057f6e41 )
Cyren	W32/Risk.PBUN-8580
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/RiskWare.PEMalform.B
APEX	Malicious
Avast	Win32:Malware-gen
BitDefender	Gen:Variant.Strictor.257617
NANO-Antivirus	Trojan.Win32.Delf.fjgbxe
MicroWorld-eScan	Gen:Variant.Strictor.257617
Tencent	Win32.Trojan.Razy.Egnz
Ad-Aware	Gen:Variant.Strictor.257617
Sophos	Generic ML PUA (PUA)
BitDefenderTheta	Gen:NN.ZexaF.34170.Fj3@a4vAvBdi
VIPRE	LooksLike.Win32.InfectedFile!A (v)
McAfee-GW-Edition	BehavesLike.Win32.Dropper.tc
FireEye	Gen:Variant.Strictor.257617
Emsisoft	Gen:Variant.Strictor.257617 (B)
SentinelOne	Static AI – Suspicious PE
Antiy-AVL	Trojan/Generic.ASMalwS.A0D566
Microsoft	Program:Win32/Wacapew.C!ml
GData	Win32.Trojan.PSE.1JIDS6Q
McAfee	Artemis!FE83348F1176
MAX	malware (ai score=89)
VBA32	Trojan.Wacatac
Malwarebytes	Generic.Trojan.Banker.DDS
Rising	Packer.Win32.Crypt.eg (CLASSIC)
Yandex	RiskWare.PEMalform!QHbSoL9IKh8
Ikarus	PUA.RiskWare.PEMalform
Fortinet	W32/Onlinegames.ASE!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml