Malware

Strictor.266170 (B) malicious file

Malware Removal

The Strictor.266170 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Strictor.266170 (B) virus can do?

  • Dynamic (imported) function loading detected
  • Authenticode signature is invalid
  • Anomalous .NET characteristics
  • Network activity detected but not expressed in API logs

How to determine Strictor.266170 (B)?


File Info:

name: 2AE63E7D2DE9395CD6FA.mlw
path: /opt/CAPEv2/storage/binaries/aa5736ec1371fa0400eaf0777b71b503ef8a9388e9fd50c648b002ac54c61929
crc32: 9D6CC072
md5: 2ae63e7d2de9395cd6faa5a349c0bbe3
sha1: 24a17aae9d47a57812f547a48dad6325f6fdbf3f
sha256: aa5736ec1371fa0400eaf0777b71b503ef8a9388e9fd50c648b002ac54c61929
sha512: 0a2191d7a881f622cf0694641b59f78f537f8dea7bd964062fbe8094a2104b359acc2b953539cff76086c1eb90428074dc2d9e636b07d976a615677fa27f5938
ssdeep: 48:6xOcGwrqoLVJAeqmV6yjoSiWJLulStapuqMSfbNtm1:fyqiVeSe0tap9zNtK
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1DD029C0177ACC215DD554634DCAACBB42232EEC2EC6652EBABDA7F2FB971340851E710
sha3_384: 724006118d8e690ddc9f3a57b2ef938fe8a710ec13a477614b8d3bc60920f10ed46f684a57e06c82d9154178b5eea6c9
ep_bytes: ff250020400000000000000000000000
timestamp: 2021-05-01 23:43:48

Version Info:

Translation: 0x0000 0x04b0
FileDescription:
FileVersion: 0.0.0.0
InternalName: 21.bundle.js.scr
LegalCopyright:
LegalTrademarks: Trademark - Lime
OriginalFilename: 21.bundle.js.scr
ProductVersion: 0.0.0.0
Assembly Version: 0.0.0.0

Strictor.266170 (B) also known as:

LionicTrojan.MSIL.Hesv.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Strictor.266170
FireEyeGeneric.mg.2ae63e7d2de9395c
McAfeeArtemis!2AE63E7D2DE9
K7AntiVirusTrojan ( 0057ddff1 )
K7GWTrojan ( 0057ddff1 )
CrowdStrikewin/malicious_confidence_80% (W)
CyrenW32/MSIL_Kryptik.EEJ.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/Starter.FC
APEXMalicious
KasperskyHEUR:Trojan.MSIL.Hesv.gen
BitDefenderGen:Variant.Strictor.266170
AvastWin32:TrojanX-gen [Trj]
TencentMsil.Trojan.Hesv.Huzu
Ad-AwareGen:Variant.Strictor.266170
SophosMal/Generic-S
TrendMicroTROJ_GEN.R002C0WKO21
McAfee-GW-EditionBehavesLike.Win32.Generic.xz
EmsisoftGen:Variant.Strictor.266170 (B)
SentinelOneStatic AI – Malicious PE
GDataGen:Variant.Strictor.266170
AviraHEUR/AGEN.1107309
MicrosoftTrojan:Win32/Wacatac.B!ml
CynetMalicious (score: 99)
AhnLab-V3Trojan/Win32.Starter.R359724
BitDefenderThetaGen:NN.ZemsilF.34294.am0@aaZB1fc
ALYacGen:Variant.Strictor.266170
MAXmalware (ai score=82)
MalwarebytesTrojan.LimeUSB
TrendMicro-HouseCallTROJ_GEN.R002C0WKO21
IkarusTrojan.Hesv
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/Hesv.5073!tr
AVGWin32:TrojanX-gen [Trj]
PandaTrj/GdSda.A

How to remove Strictor.266170 (B)?

Strictor.266170 (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment