Trojan

Trojan.Win64.Shelma.mig (file analysis)

Malware Removal

The Trojan.Win64.Shelma.mig is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan.Win64.Shelma.mig virus can do?

  • The binary likely contains encrypted or compressed data.
  • The executable is compressed using UPX

How to determine Trojan.Win64.Shelma.mig?


File Info:

crc32: 38D4F6FE
md5: 25132d7e9d0f5570b9c3236a4470600b
name: 25132D7E9D0F5570B9C3236A4470600B.mlw
sha1: 29e15c1cd926366dd3b820563fac4ecd4291bb1d
sha256: 4988d98bf34df7ca28924290db37353bd4a11ac4edbfd2ccd2bd3d1212eb286c
sha512: 1f312f732ab64559bccc9032a70fac3d5f4b32cf65b6630baa540f9124833d6183214df42e25d87cdd2612c2769005621444edf96531b5fdd2b3ce7afbfe9cb6
ssdeep: 12288:s7EHcPwDQivCLaqC2MF9581EkArWFd7EhnoJqDcQ4MKOAOC5lS:rqJC2MZ8126woJqDulJOmc
type: PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows

Version Info:

0: [No Data]

Trojan.Win64.Shelma.mig also known as:

K7AntiVirusTrojan ( 0056c3071 )
LionicTrojan.Win32.Bulz.4!c
Elasticmalicious (high confidence)
DrWebBackDoor.Meterpreter.157
CynetMalicious (score: 99)
ALYacGen:Variant.Bulz.225391
CylanceUnsafe
SangforTrojan.Win64.Shelma.mig
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaBackdoor:Win64/Shelma.70e82ef7
K7GWTrojan ( 0056c3071 )
Cybereasonmalicious.e9d0f5
CyrenW64/Trojan.KTCA-6830
SymantecTrojan.Gen.MBT
ESET-NOD32a variant of Win32/Rozena.AVL
APEXMalicious
AvastWin64:Trojan-gen
KasperskyTrojan.Win64.Shelma.mig
BitDefenderGen:Variant.Bulz.225391
MicroWorld-eScanGen:Variant.Bulz.225391
TencentWin64.Trojan.Shelma.Hoel
Ad-AwareGen:Variant.Bulz.225391
SophosMal/Generic-R + ATK/Rozena-C
TrendMicroTROJ_GEN.R002C0RGK21
McAfee-GW-EditionBehavesLike.Win64.Generic.bc
FireEyeGeneric.mg.25132d7e9d0f5570
EmsisoftGen:Variant.Bulz.225391 (B)
SentinelOneStatic AI – Suspicious PE
WebrootW32.Bot.Gen
AviraHEUR/AGEN.1138546
Antiy-AVLTrojan/Generic.ASBOL.C5E3
MicrosoftTrojan:Win32/Woreflint.A!cl
GDataGen:Variant.Bulz.225391
McAfeeRDN/Generic.rp
MAXmalware (ai score=89)
PandaTrj/CI.A
TrendMicro-HouseCallTROJ_GEN.R002H09GK21
IkarusTrojan.Win32.Rozena
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Rozena.AVL!tr
AVGWin64:Trojan-gen
Paloaltogeneric.ml
Qihoo-360Win64/Ransom.DogHousePower.HgEASYwA

How to remove Trojan.Win64.Shelma.mig?

Trojan.Win64.Shelma.mig removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment