Trojan

Trojan.Sigmal.S2540737 information

Malware Removal

The Trojan.Sigmal.S2540737 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Trojan.Sigmal.S2540737 virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Behavioural detection: Executable code extraction – unpacking
  • Yara rule detections observed from a process memory dump/dropped files/CAPE
  • Creates RWX memory
  • Possible date expiration check, exits too soon after checking local time
  • Dynamic (imported) function loading detected
  • CAPE extracted potentially suspicious content
  • Authenticode signature is invalid

How to determine Trojan.Sigmal.S2540737?



File Info:

name: F49C5F1C51516FFCFF3A.mlw
path: /opt/CAPEv2/storage/binaries/c413c209fe15c19370c66ac68e96337650196cb1e9c58c96ded7fb8ad98fcfd2
crc32: E2AC6170
md5: f49c5f1c51516ffcff3ac54228c734b5
sha1: 3d195aff23a588d72b0439b6cf5b7dc617d00c97
sha256: c413c209fe15c19370c66ac68e96337650196cb1e9c58c96ded7fb8ad98fcfd2
sha512: 338939bd844149e69e7ad1fa4b06a7617b3709f9a59473aba8de7e2931cc326f6bc0df44f94a2a7f8a24e62db66009d83003bd65cd4f9d772f67535532c49a71
ssdeep: 6144:iQQCwO3NIQSEsazEATM8W7XIINyRoxbhacL6koevWbp3FPUrbMrkdkQwCzvRR0hD:idOlsazgARe4kyHPUrbGZC1R0/
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T115256C13EA6C9537E05A09B48867C2B1E2713EC087F88F8779ACB72DD5343E7A534616
sha3_384: 263c27e8797c6f66b569db0178edca6c344e5107f6794ac7cc0014efd4be17ad45adc57bcde23204d90ca0780cdc87c4
ep_bytes: e816880000e917feffff6a4068888246
timestamp: 2006-03-30 14:06:03


Version Info:

Comments:  52
ProductVersion: 6, 1, 5633, 9966
CompanyName: BlueToad Agree
FileDescription: Stead Feel
FileVersion: 6, 1, 5633, 9966
InternalName: Stead Feel
LegalCopyright: Copyright 2013 BlueToad Agree. All rights reserved.
OriginalFilename: Docry.exe
ProductName: Stead Feel
Translation: 0x0409 0x04b0

Trojan.Sigmal.S2540737 also known as:

Elasticmalicious (high confidence)
DrWebTrojan.IcedID.6
MicroWorld-eScanGen:Heur.Mint.Zard.52
FireEyeGeneric.mg.f49c5f1c51516ffc
CAT-QuickHealTrojan.Sigmal.S2540737
McAfeeGenericRXEV-PX!F49C5F1C5151
K7AntiVirusSpyware ( 005293221 )
K7GWSpyware ( 005293221 )
CrowdStrikewin/malicious_confidence_80% (D)
BitDefenderThetaGen:NN.ZexaF.34062.7q0@ae56MRoi
CyrenW32/Zusy.BY.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32Win32/Spy.IcedId.D
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Heur.Mint.Zard.52
NANO-AntivirusTrojan.Win32.IcedID.ezmgwt
AvastWin32:Malware-gen
TencentMalware.Win32.Gencirc.10b1f56e
Ad-AwareGen:Heur.Mint.Zard.52
EmsisoftGen:Heur.Mint.Zard.52 (B)
ComodoTrojWare.Win32.Azden.B@7lxyp9
ZillyaTrojan.IcedID.Win32.2
McAfee-GW-EditionGenericRXEV-PX!F49C5F1C5151
SophosML/PE-A + Mal/Zbot-UU
SentinelOneStatic AI – Malicious PE
GDataGen:Heur.Mint.Zard.52
JiangminTrojan.Generic.cbmti
AviraHEUR/AGEN.1101377
MAXmalware (ai score=84)
Antiy-AVLTrojan/Generic.ASMalwS.253C6CF
ArcabitTrojan.Mint.Zard.52
MicrosoftTrojan:Win32/Skeeyah.A!rfn
CynetMalicious (score: 99)
AhnLab-V3Malware/Win32.Generic.C2486338
VBA32BScope.TrojanBanker.IcedID
ALYacGen:Heur.Mint.Zard.52
MalwarebytesMalware.AI.1635315638
APEXMalicious
RisingTrojan.Generic@ML.99 (RDML:tZbW32D6Jl/mzLfZVUCeVA)
YandexTrojan.PWS.IcedID!U1QNmfmXlME
IkarusTrojan-Spy.Agent
MaxSecureWin.MxResIcn.Heur.Gen
FortinetW32/Zbot.PKJO!tr
AVGWin32:Malware-gen
PandaTrj/Genetic.gen

How to remove Trojan.Sigmal.S2540737?

Trojan.Sigmal.S2540737 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment