Trojan.Generic.5061758 (file analysis)

The Trojan.Generic.5061758 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Generic.5061758 virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Unconventionial language used in binary resources: Russian
• The binary contains an unknown PE section name indicative of packing
• The executable is compressed using UPX
• Authenticode signature is invalid
• CAPE detected the shellcode patterns malware family
• Yara detections observed in process dumps, payloads or dropped files

How to determine Trojan.Generic.5061758?

File Info:
name: 15FD146A7A25EA19BC64.mlw
path: /opt/CAPEv2/storage/binaries/033c73c5abfac1dbad6859b37888d08361029b176466ce9f06ca96410eb82b14
crc32: 32235B28
md5: 15fd146a7a25ea19bc64d1f4a4a5bb12
sha1: 82016b4dda9d96188b6a4ac06f7d1f9608814163
sha256: 033c73c5abfac1dbad6859b37888d08361029b176466ce9f06ca96410eb82b14
sha512: d0c3bff299f13fe575fa8d75cf51aaa3d4ee1fb49f5d15977c0a4cddfb0268fa45bc3eed8268729624935b8d70ed703cb5fab8315b195300032abfa57af07950
ssdeep: 3072:sdlkaUvAw7+5PpBfRo5aHIkzDQIDogJKCvFfxjjgjsWXk3:sdu5v5I7zzDDkQFCjsT
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T11594D0179A837473C1BA02B34CDB3EDCFE2E799572404B2777E8882A58D26597F23914
sha3_384: 96d7c94b52903156af3f745621601405421402fa75cd645ee8c1a8413c40cf05ecb5b083aac021fe6b55e66a83af5d79
ep_bytes: 558bec83ec2c8d4de051ff75fc686b42
timestamp: 2004-12-19 02:13:16

Version Info:
0: [No Data]

Trojan.Generic.5061758 also known as:

How to remove Trojan.Generic.5061758?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.