Categories: Malware

Ulise.101508 malicious file

The Ulise.101508 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Ulise.101508 virus can do?

Executable code extraction
Injection (inter-process)
Injection (Process Hollowing)
Creates RWX memory
The binary likely contains encrypted or compressed data.
Executed a process and injected code into it, probably while unpacking
Tries to unhook or modify Windows functions monitored by Cuckoo
Network activity detected but not expressed in API logs
Checks the CPU name from registry, possibly for anti-virtualization
Anomalous binary characteristics

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Ulise.101508?


File Info:
crc32: C66A5CE7md5: a36e0a2abc20661fa00f087e322cf6bfname: soja.exesha1: 8a8989042e7b733a52f89782c0406fab0a6612d9sha256: 9442b98bd1bea41607353f5cf4010bf6a9b38537131760dddbd8c2c6e6d3176bsha512: 6cf6697cd2003f7eaffa1b484dff3e36b879a0123eabe17690cd05d3aa1b375c1a22caecacfa9424ccdc2118e4a853a85f603aec2880e4d3a31518c5c9abe626ssdeep: 24576:HgLHilXOb6kpGoNE/DwEd6FEqe2MxIXpf+:HGGvYGj/nEFEqi0+type: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Ulise.101508 also known as:

Bkav	W32.AIDetectVM.malware2
MicroWorld-eScan	Gen:Variant.Ulise.101508
Qihoo-360	HEUR/QVM05.1.89FB.Malware.Gen
McAfee	GenericRXJS-IA!A36E0A2ABC20
Cylance	Unsafe
AegisLab	Trojan.Win32.Azorult.i!c
Sangfor	Malware
K7AntiVirus	Riskware ( 0040eff71 )
BitDefender	Gen:Variant.Ulise.101508
K7GW	Riskware ( 0040eff71 )
Cybereason	malicious.42e7b7
BitDefenderTheta	Gen:NN.ZelphiF.34090.3GW@a0TFLogi
Cyren	W32/Trojan.ETQT-6658
TrendMicro-HouseCall	TROJ_GEN.R002H0CBR20
Paloalto	generic.ml
GData	Gen:Variant.Ulise.101508
Kaspersky	HEUR:Trojan-PSW.Win32.Azorult.gen
Alibaba	TrojanPSW:Win32/Injector.23aa1e5b
Avast	Win32:Trojan-gen
Rising	Trojan.Injector!8.C4 (CLOUD)
Ad-Aware	Gen:Variant.Ulise.101508
Sophos	Mal/Fareit-V
F-Secure	Trojan.TR/Injector.bypmx
DrWeb	Trojan.PWS.Siggen2.44037
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.Fareit.cc
SentinelOne	DFI – Suspicious PE
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.a36e0a2abc20661f
Emsisoft	Gen:Variant.Ulise.101508 (B)
APEX	Malicious
F-Prot	W32/Kryptik.AST
Webroot	W32.Trojan.Gen
Avira	TR/Injector.bypmx
Antiy-AVL	Trojan/Win32.Wacatac
Endgame	malicious (high confidence)
ZoneAlarm	HEUR:Trojan-PSW.Win32.Azorult.gen
Microsoft	Trojan:Win32/Lokibot.F!MTB
AhnLab-V3	Win-Trojan/Delphiless.Exp
Acronis	suspicious
MAX	malware (ai score=88)
ESET-NOD32	a variant of Win32/Injector.EKTJ
Ikarus	Trojan.Win32.Injector
eGambit	Unsafe.AI_Score_100%
Fortinet	W32/Agent.AJFK!tr
CrowdStrike	win/malicious_confidence_100% (W)
MaxSecure	Trojan.Malware.300983.susgen