Trojan

Trojan.GenericRI.S22015329 malicious file

Malware Removal

The Trojan.GenericRI.S22015329 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.GenericRI.S22015329 virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (1 unique times)
  • Creates RWX memory
  • A process attempted to delay the analysis task.
  • Drops a binary and executes it
  • The binary likely contains encrypted or compressed data.
  • Uses Windows utilities for basic functionality
  • Deletes its original binary from disk
  • Attempts to repeatedly call a single API many times in order to delay analysis time
  • Installs itself for autorun at Windows startup
  • Creates a copy of itself
  • Uses suspicious command line tools or Windows utilities

How to determine Trojan.GenericRI.S22015329?


File Info:

crc32: 1405C09C
md5: 693993b4902d964038a970170c9f5351
name: 693993B4902D964038A970170C9F5351.mlw
sha1: ca411801cb920c47ec48cbce59ca70c22021e1b8
sha256: f68e1ee208f8a75af4ef35ee9fc1b6913c6f82062192fdc4b2cdf16faa5e53d4
sha512: 53c877524f1d7cfcf51e02f2641ebf3d16c0464c78ffb96c2382d86686ffd15a0397fcbc565fa5e905f0898243ffded3e96fea212aab06d8ccbe63d9501ba376
ssdeep: 12288:MrPt/6Lo/BsS8NSFSQE6ZWn5tx5uU29cg+8hkBq:jLo/B78wyxQ4GhkBq
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

LegalCopyright: Copyright (C) 2021
InternalName: AAAA
FileVersion: 1, 0, 0, 1
CompanyName:
LegalTrademarks:
ProductName: Application AAAA
ProductVersion: 1, 0, 0, 1
FileDescription: Application MFC AAAA
OriginalFilename: AAAA.EXE
Translation: 0x040c 0x04b0

Trojan.GenericRI.S22015329 also known as:

Elasticmalicious (high confidence)
DrWebBackDoor.Spy.422
CAT-QuickHealTrojan.GenericRI.S22015329
ALYacDeepScan:Generic.Mulinex.0CF9EC3D
CylanceUnsafe
ZillyaTrojan.Generic.Win32.1392882
CrowdStrikewin/malicious_confidence_90% (W)
K7GWRiskware ( 0040eff71 )
K7AntiVirusRiskware ( 0040eff71 )
CyrenW32/Trickbot.GW.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32Win32/Farfli.CYQ
APEXMalicious
AvastWin32:BackdoorX-gen [Trj]
CynetMalicious (score: 100)
KasperskyHEUR:Trojan.Win32.Agent.gen
BitDefenderDeepScan:Generic.Mulinex.0CF9EC3D
NANO-AntivirusTrojan.Win32.Mlw.iucbro
MicroWorld-eScanDeepScan:Generic.Mulinex.0CF9EC3D
TencentMalware.Win32.Gencirc.10ce6767
Ad-AwareDeepScan:Generic.Mulinex.0CF9EC3D
SophosTroj/Farfli-DW
BitDefenderThetaGen:NN.ZexaF.34170.Lq0@aihzYFoe
VIPRETrojan.Win32.Generic!BT
TrendMicroBKDR_ZEGOST.SM34
McAfee-GW-EditionBehavesLike.Win32.Generic.jc
FireEyeGeneric.mg.693993b4902d9640
EmsisoftDeepScan:Generic.Mulinex.0CF9EC3D (B)
SentinelOneStatic AI – Malicious PE
JiangminTrojan.Generic.gvvqu
AviraHEUR/AGEN.1101570
Antiy-AVLTrojan/Generic.ASMalwS.332E8B4
MicrosoftBackdoor:Win32/Zegost.KM!MTB
GridinsoftBackdoor.Win32.AI.oa!s1
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataDeepScan:Generic.Mulinex.0CF9EC3D
AhnLab-V3Backdoor/Win.Zegost.R422117
Acronissuspicious
McAfeeGenericRXOD-IK!693993B4902D
MAXmalware (ai score=85)
VBA32BScope.Backdoor.Farfli
MalwarebytesBackdoor.Farfli
TrendMicro-HouseCallBKDR_ZEGOST.SM34
YandexTrojan.Agent!UvZYx0QUaws
IkarusBackdoor.Win32.Zegost
MaxSecureTrojan.Malware.7164915.susgen
FortinetW32/Farfli.CYQ!tr
AVGWin32:BackdoorX-gen [Trj]
Paloaltogeneric.ml

How to remove Trojan.GenericRI.S22015329?

Trojan.GenericRI.S22015329 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment