Strictor.268780 malicious file

The Strictor.268780 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Strictor.268780 virus can do?

Creates RWX memory
Dynamic (imported) function loading detected
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Strictor.268780?


File Info:
name: D352DD8BEB8505DB6C30.mlw
path: /opt/CAPEv2/storage/binaries/d5b295d3f56e2746bda45d30681e2ca889a2cee188ce4720a97ee9bdb9ba70c4
crc32: 6535B1A2
md5: d352dd8beb8505db6c3028c6b35553c8
sha1: dbac82f70f2a8bdf5deb54ec36aad63bd3f0f71f
sha256: d5b295d3f56e2746bda45d30681e2ca889a2cee188ce4720a97ee9bdb9ba70c4
sha512: dfd1679e77e45d3f26adde5a5bc645c02ae5a286ee0a575e9c7580580d15835b079661233a8df4f7a4052bf2c3e687894fb15be6a2765ea4a272a2481f913b49
ssdeep: 98304:mt2QTPOUm+PT19112uQT2poPftI4rfz8U9aHs+FnVvV:mtp0SSus2MWU9aHs+
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1EF664A35F18460A6D8F65A31973757D46D3F6D922D0A89FE32AC3D48EF3A240381E687
sha3_384: e9af8fb2ecc8432ac5efce42e4ef68429dc6f46bb150b34c9a57256f5329f9595aa6371cb82cf4d092c2169adc6c66f8
ep_bytes: 558bec83c4f0b874757900e890bdc5ff
timestamp: 2022-02-02 03:31:34

Version Info:
FileDescription: Zemony Reader Combination
FileVersion: 22.5.32.11
ProgramID: Zemony Reader Combination
ProductName: Zemony Reader Combination
ProductVersion: 22.5.32.11
Translation: 0x0409 0x04e4

Strictor.268780 also known as:

Lionic	Trojan.Win32.Generic.4!c
MicroWorld-eScan	Gen:Variant.Strictor.268780
FireEye	Generic.mg.d352dd8beb8505db
McAfee	Artemis!D352DD8BEB85
Sangfor	Suspicious.Win32.Fragtor.57385
K7AntiVirus	Trojan-Downloader ( 0058d8731 )
K7GW	Trojan-Downloader ( 0058d8731 )
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/TrojanDownloader.Delf_AGen.H
BitDefender	Gen:Variant.Strictor.268780
Avast	Win32:Trojan-gen
Sophos	Mal/Generic-S
McAfee-GW-Edition	BehavesLike.Win32.Dropper.vh
Emsisoft	Gen:Variant.Strictor.268780 (B)
Microsoft	Trojan:Win32/Sabsik.TE.B!ml
GData	Gen:Variant.Strictor.268780
BitDefenderTheta	Gen:NN.ZelphiCO.34182.@V0@auLo0yei
ALYac	Gen:Variant.Strictor.268780
MAX	malware (ai score=89)
Malwarebytes	Trojan.Dropper
TrendMicro-HouseCall	TROJ_GEN.R002H09B222
Rising	Downloader.Delf_AGen!8.1311B (CLOUD)
Ikarus	Trojan-Downloader.Win32.Delf
Fortinet	W32/Delf_AGen.H!tr.dldr
AVG	Win32:Trojan-gen
Panda	Trj/GdSda.A

How to remove Strictor.268780?

Strictor.268780 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X