Strictor.264304 removal guide

The Strictor.264304 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Strictor.264304 virus can do?

Dynamic (imported) function loading detected
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine Strictor.264304?


File Info:
name: D68FD8D522B0F20C17A8.mlw
path: /opt/CAPEv2/storage/binaries/0f2ad91f84a545f1adc793ff74cf10a3b63f3ac2b4ea449aed042d1473d511cc
crc32: B94BE1BD
md5: d68fd8d522b0f20c17a8bb7007937737
sha1: eaee6423e2a59b03640c7a22354c0b964ffbab71
sha256: 0f2ad91f84a545f1adc793ff74cf10a3b63f3ac2b4ea449aed042d1473d511cc
sha512: 9f369c05efd42a5b3eb5aac5837ef8a4c4a7cf3a39bee87d96e4f84e82972654d999b1547f25f9b256430693f40cd9b5c17edb66dac940b40b28352cb06d5108
ssdeep: 98304:CYgZv7iY00QY0+W6vPKL5vIayQ8Q+pS2PilqJweSyOiFJo0:Rgh900Q43KlvyQ8Vp5AqJwWOO
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1DE16AD42BE804F12C7462F37E4E7507053259FE26627FB1E3A96321525B336F4A8E2D9
sha3_384: 2a61e61b8ac0d9d3f9a2cef8c94b0be713e15c78f17ebfb3c3787f7d25a9a7cb58ec830e2391cff6a39ba5a642a6b97d
ep_bytes: ff250020400000000000000000000000
timestamp: 2083-03-14 08:18:50

Version Info:
Translation: 0x0000 0x04b0
Comments: by IceCube
CompanyName: MultiBotRun
FileDescription: Updater Tool
FileVersion: 4.3.2021.1204
InternalName: Update.exe
LegalCopyright: MultiBotRun
LegalTrademarks: MultiBotRun
OriginalFilename: Update.exe
ProductName: Updater
ProductVersion: 4.3.2021.1204
Assembly Version: 4.3.8008.31493

Strictor.264304 also known as:

Cynet	Malicious (score: 100)
FireEye	Generic.mg.d68fd8d522b0f20c
ALYac	Gen:Variant.Strictor.264304
APEX	Malicious
BitDefender	Gen:Variant.Strictor.264304
MicroWorld-eScan	Gen:Variant.Strictor.264304
Ad-Aware	Gen:Variant.Strictor.264304
Emsisoft	Gen:Variant.Strictor.264304 (B)
McAfee-GW-Edition	Artemis
SentinelOne	Static AI – Suspicious PE
GData	Gen:Variant.Strictor.264304
MAX	malware (ai score=95)
Gridinsoft	Ransom.Win32.Sabsik.sa
Arcabit	Trojan.Strictor.D40870
Microsoft	Trojan:Win32/Wacatac.B!ml
McAfee	Artemis!D68FD8D522B0
VBA32	Malware-Cryptor.MSIL.AgentTesla.Heur
TrendMicro-HouseCall	TROJ_GEN.R002H09L421
Fortinet	PossibleThreat.PALLAS.H
BitDefenderTheta	Gen:NN.ZemsilF.34062.4p0@ameAmd
Cybereason	malicious.522b0f

How to remove Strictor.264304?

Strictor.264304 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X