Trojan.Generic.33561006 (file analysis)

The Trojan.Generic.33561006 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.Generic.33561006 virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Executable file is packed/obfuscated with ASPack
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Trojan.Generic.33561006?


File Info:
name: 52172CAEBCA9D814A5F3.mlw
path: /opt/CAPEv2/storage/binaries/854cc8e2b6ec36e1cb9002af5594d33d3295fa7819f02f4a4502471ca503afe4
crc32: F7B9425D
md5: 52172caebca9d814a5f38837764f2bc6
sha1: b6c6147bfc8c634b77c161a4907203d6e76ea1de
sha256: 854cc8e2b6ec36e1cb9002af5594d33d3295fa7819f02f4a4502471ca503afe4
sha512: ea80b94de1599413996386af5614a1b703ad84c484db5be9f3448ca5cea1aad64caba37ce72c97ca0f633fe6d9fd1f93676725cca8615c6d069f283638117542
ssdeep: 6144:obHu6Ore6H68NOg3XOD4DVkasAQISzqJOZ:oMrh7fHOD48i
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1A5D48C11B6008035E3A64731595AEAF509686E3927A9E4CFF3783E395E702D39B3724F
sha3_384: da717fa125a2c824daf6a8517f7a5aae1ea1f966ab09c251312e9d5b1b6e72e33eee5dbc2ee7489c24e722048889716e
ep_bytes: 1d61c13d2d66b69041dc760671db01bc
timestamp: 2013-09-14 01:04:08

Version Info:
0: [No Data]

Trojan.Generic.33561006 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Urelas.4!c
DrWeb	Trojan.Siggen6.36651
MicroWorld-eScan	Trojan.Generic.33561006
ClamAV	Win.Malware.Urelas-9645835-0
McAfee	GenericRXVV-WF!52172CAEBCA9
Malwarebytes	CardSpy.Spyware.Stealer.DDS
Sangfor	Suspicious.Win32.Save.ins
K7AntiVirus	Riskware ( 0040eff71 )
Alibaba	Trojan:Win32/Urelas.3bca3bc5
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.bfc8c6
BitDefenderTheta	Gen:NN.ZexaF.36196.OCZ@aGrdcJg
Cyren	W32/Urelas.DN.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
APEX	Malicious
Cynet	Malicious (score: 100)
BitDefender	Trojan.Generic.33561006
Avast	Win32:Malware-gen
Tencent	Trojan.Win32.CardSpy.16000130
Emsisoft	Trojan.Generic.33561006 (B)
F-Secure	Trojan.TR/Crypt.XPACK.Gen
Baidu	Win32.Trojan.Urelas.d
VIPRE	Trojan.Generic.33561006
TrendMicro	TROJ_GEN.R03BC0DDO23
McAfee-GW-Edition	BehavesLike.Win32.Generic.jz
Trapmine	suspicious.low.ml.score
FireEye	Generic.mg.52172caebca9d814
Sophos	Mal/Generic-S
SentinelOne	Static AI – Malicious PE
GData	Trojan.Generic.33561006
Avira	TR/Crypt.XPACK.Gen
Antiy-AVL	Trojan/Win32.Urelas
Xcitium	TrojWare.Win32.Urelas.DAQ@5qwr5f
Arcabit	Trojan.Generic.D20019AE
Microsoft	Trojan:Win32/Urelas.JU!MTB
Google	Detected
AhnLab-V3	Trojan/Win.Urelas.R572293
ALYac	Trojan.Generic.33561006
MAX	malware (ai score=85)
Cylance	unsafe
Panda	Trj/Chgt.AD
TrendMicro-HouseCall	TROJ_GEN.R03BC0DDO23
Rising	Spyware.CardSpy!1.A1A8 (CLASSIC)
Ikarus	Trojan.Win32.Urelas
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/CardSpy.PRKJ!tr
AVG	Win32:Malware-gen
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Trojan.Generic.33561006?

Trojan.Generic.33561006 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X