Categories: Malware

What is “Strictor.269198”?

The Strictor.269198 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Strictor.269198 virus can do?

Yara rule detections observed from a process memory dump/dropped files/CAPE
Creates RWX memory
A process attempted to delay the analysis task.
Dynamic (imported) function loading detected
Performs HTTP requests potentially not found in PCAP.
HTTPS urls from behavior.
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
The executable is likely packed with VMProtect
Authenticode signature is invalid
Attempts to modify proxy settings

How to determine Strictor.269198?


File Info:
name: 2E69944DDC03120ACE24.mlwpath: /opt/CAPEv2/storage/binaries/f12f318687648bfd68f4a08d6553196a1121cf93c8b9b41e926aacb53b364089crc32: DE37872Cmd5: 2e69944ddc03120ace24bbd99f29fb5fsha1: b619ddf0bf21434c3994d1846b2db2bf9da4eb6esha256: f12f318687648bfd68f4a08d6553196a1121cf93c8b9b41e926aacb53b364089sha512: 6313401a529f29615e551d0f10c402c4fb89e963235776aacd4be721f385a491b640246fbe2d4d771488f166fb84b66fd803b236b17b9a6bd5a491f452d2944cssdeep: 98304:T36VvfHWa8SrVOwXqrwH0rJo/dR+NXOAoMRBPAjhdgt4b:OVapu4k0rJo/dKX/tUbgctype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1EF16236362190149E0E5C93A9937FDD571FB13678AA2ACF495D6EDC323328E1E303A53sha3_384: 423974bca0191cf8cff49a8d981cb0849147c185e9ea5879b4e1b85a2e40129a9eb5285b28faec98cd3e872f422b659eep_bytes: 68b47a5582e8b283faff4184dc81f145timestamp: 2022-04-24 19:48:15
Version Info:
CompanyName: BurnawareFileDescription: BurnAwareFileVersion: 15.4.0.0LegalCopyright: Copyright © 2022 Burnaware.LegalTrademarks: All rights reserved.ProductName: BurnAwareProductVersion: 15.4Comments: http://www.burnaware.comTranslation: 0x0409 0x04e4

Strictor.269198 also known as:

tehtris	Generic.Malware
MicroWorld-eScan	Gen:Variant.Strictor.269198
FireEye	Generic.mg.2e69944ddc03120a
ALYac	Gen:Variant.Strictor.269198
BitDefender	Gen:Variant.Strictor.269198
Cybereason	malicious.ddc031
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
APEX	Malicious
Rising	Trojan.Generic@AI.92 (RDMK:cmRtazqOzk2EfW0yuZdvoqhykQfB)
Ad-Aware	Gen:Variant.Strictor.269198
Emsisoft	Gen:Variant.Strictor.269198 (B)
McAfee-GW-Edition	BehavesLike.Win32.Generic.wc
Sophos	Generic ML PUA (PUA)
SentinelOne	Static AI – Malicious PE
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
GData	Gen:Variant.Strictor.269198
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win.Generic.R478869
MAX	malware (ai score=88)
MaxSecure	Trojan.Malware.300983.susgen
BitDefenderTheta	AI:Packer.643813A71F