Categories: Malware

Strictor.266739 removal

The Strictor.266739 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Strictor.266739 virus can do?

Behavioural detection: Executable code extraction – unpacking
Yara rule detections observed from a process memory dump/dropped files/CAPE
Creates RWX memory
Reads data out of its own binary image
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Checks for the presence of known devices from debuggers and forensic tools
Anomalous binary characteristics
Binary compilation timestomping detected

How to determine Strictor.266739?


File Info:
name: 0E213FBDD6089A40E834.mlwpath: /opt/CAPEv2/storage/binaries/d038818616a73915985ef0829b51b5a4d707186031b78cca5c6326d4ac4363c4crc32: FB0AAE84md5: 0e213fbdd6089a40e834a96ae5cf7a0fsha1: a2ef9912571d02778563134aac2e8a9e5df28171sha256: d038818616a73915985ef0829b51b5a4d707186031b78cca5c6326d4ac4363c4sha512: 8315960bfe9fba705f7aeb9ac79a19c9e8aab847db95e54f138120b73c895d693408cf4a85805c07e7770fce06f674c9d2e5407591d4cae68a146a9a344b5c88ssdeep: 3072:LoPSJBIfPgPXGYATeeeG3GKNCtQavyi3rTCY6DFdcI1Du+pQj7B1PJ8D2iR2aHDz:U2ICtJqi7TH0FuI1DHefGH+Atype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1D2347DE5AB10BF88D4203CBF6571CB85817C5507251B1AE9CAB63AE9C43159CBE3A3C7sha3_384: 90fad1a6130c8fd2a94dab8868b7a47e50b3b1988335399ee8a81024641fc5f95ccfd3b8fb4a34475418c0a1d838204aep_bytes: eb0583b81fdf7750eb0581ed9798e5e8timestamp: 2092-11-27 00:08:30
Version Info:
FileDescription: AdGuard Web InstallerLegalCopyright: (C) 2009-2018 Adguard Software LtdProductName: AdGuard Web InstallerProductVersion: 1.0CompanyName: Adguard Software LtdTranslation: 0x0409 0x04b0

Strictor.266739 also known as:

Bkav	W32.AIDetect.malware2
Lionic	Trojan.Win32.Reline.i!c
MicroWorld-eScan	Gen:Variant.Strictor.266739
FireEye	Generic.mg.0e213fbdd6089a40
McAfee	GenericRXAA-AA!0E213FBDD608
Cylance	Unsafe
K7AntiVirus	Riskware ( 0040eff71 )
Alibaba	Packed:Win32/Obsidium.401bd168
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.2571d0
BitDefenderTheta	Gen:NN.ZexaF.34084.oq2@aiAstAoi
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Packed.Obsidium.CZ
TrendMicro-HouseCall	TROJ_GEN.R04CH0CLB21
Kaspersky	VHO:Trojan-PSW.Win32.Reline.gen
BitDefender	Gen:Variant.Strictor.266739
Avast	Win32:Trojan-gen
Ad-Aware	Gen:Variant.Strictor.266739
Emsisoft	Gen:Variant.Strictor.266739 (B)
McAfee-GW-Edition	BehavesLike.Win32.Dropper.dc
SentinelOne	Static AI – Malicious PE
Sophos	Mal/Generic-S
APEX	Malicious
GData	Gen:Variant.Strictor.266739
Jiangmin	Trojan.PSW.Reline.nk
Antiy-AVL	Trojan/Generic.ASMalwS.34E908B
Gridinsoft	Ransom.Win32.Sabsik.sa
Arcabit	Trojan.Strictor.D411F3
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.Generic.R457452
Acronis	suspicious
VBA32	TScope.Malware-Cryptor.SB
ALYac	Gen:Variant.Strictor.266739
MAX	malware (ai score=84)
Malwarebytes	Spyware.RedLineStealer
Rising	Trojan.Generic@ML.87 (RDMK:E4CUnFy0H0TQi/zhVkgn1Q)
Ikarus	Trojan.Win32.Obsidium
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/PossibleThreat
AVG	Win32:Trojan-gen
CrowdStrike	win/malicious_confidence_60% (D)