Malware

Ulise.144497 malicious file

Malware Removal

The Ulise.144497 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Ulise.144497 virus can do?

  • Sample contains Overlay data
  • Unconventionial language used in binary resources: Chinese (Simplified)
  • The binary contains an unknown PE section name indicative of packing
  • Executable file is packed/obfuscated with NsPack
  • Authenticode signature is invalid
  • CAPE detected the shellcode get eip malware family

How to determine Ulise.144497?



File Info:

name: 1DDA51295BD05EDD1119.mlw
path: /opt/CAPEv2/storage/binaries/abe6bc560f477152514a8098cd6eb529c1666922707b1f30f455d453a959968b
crc32: 0E933D29
md5: 1dda51295bd05edd111955c4b4de79f1
sha1: d9f36244af3189cf92677a8a82a4e2512afbf6b8
sha256: abe6bc560f477152514a8098cd6eb529c1666922707b1f30f455d453a959968b
sha512: 1266b9a6d005f6640a86e7b8622117c655e83b4f2c093a0b90d6bd3939c12c79de9e68e348ceec97162f01642c106572b81478775562769517da39db262caeda
ssdeep: 24:OEhu70za/OpwgGBefFmBEDSFb+UDsG5LXoWHHI3p1HXnmVGB5CQ/h/l4C+FM/llP:OEPz6E9UXvcF/laoBbo4Ui
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1C8F1FD42AE3DC9B1C0804035CE9F4FF15A28AC13E5412A4363B1FEAEFDF9710B80A665
sha3_384: d3d3f856c1cb93d6fd15daaf5c03a0aa39db58f55234b78fc006a07381de251767b2644bdaee83d2301627585cbc3741
ep_bytes: 9c60e8000000005d83ed078d9d71fcff
timestamp: 1992-06-19 22:22:17


Version Info:

0: [No Data]

Ulise.144497 also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Genome.4!c
tehtrisGeneric.Malware
MicroWorld-eScanGen:Variant.Ulise.144497
FireEyeGeneric.mg.1dda51295bd05edd
SkyhighBehavesLike.Win32.Generic.zz
McAfeeArtemis!1DDA51295BD0
Cylanceunsafe
ZillyaTrojan.Genome.Win32.113402
SangforSuspicious.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaTrojan:Win32/Generic.13e8196f
K7GWTrojan ( 005257651 )
K7AntiVirusTrojan ( 005257651 )
ArcabitTrojan.Ulise.D23471
BitDefenderThetaAI:Packer.359C8B4D1F
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Generik.MJUWBRM
CynetMalicious (score: 100)
APEXMalicious
KasperskyUDS:DangerousObject.Multi.Generic
BitDefenderGen:Variant.Ulise.144497
NANO-AntivirusTrojan.Win32.TrjGen.coczp
AvastWin32:Evo-gen [Trj]
TencentWin32.Trojan.Crypt.Simw
EmsisoftGen:Variant.Ulise.144497 (B)
F-SecureTrojan.TR/Crypt.NSPM.Gen
VIPREGen:Variant.Ulise.144497
Trapminemalicious.high.ml.score
SophosMal/Generic-S
IkarusNet-Worm.Win32.Agent
JiangminTrojan/Genome.rcb
WebrootW32.Virus.Fujacks
VaristW32/Downloader-Sml!Eldorado
AviraTR/Crypt.NSPM.Gen
Antiy-AVLTrojan/Win32.AGeneric
KingsoftWin32.BMW.b.2526490
XcitiumTrojWare.Win32.Trojan.NSPM.~gen@20n73t
ZoneAlarmUDS:DangerousObject.Multi.Generic
GDataGen:Variant.Ulise.144497
GoogleDetected
AhnLab-V3Worm/Win32.Fujack.R1891
ALYacGen:Variant.Ulise.144497
MAXmalware (ai score=100)
VBA32Trojan.Tnega
MalwarebytesTrojan.MalPack.NSPack
PandaTrj/Genetic.gen
ZonerProbably Heur.ExeHeaderP
RisingWorm.Win32.Viking.km (CLASSIC)
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.2346677.susgen
FortinetW32/Genome.KVEB!tr
AVGWin32:Evo-gen [Trj]
Cybereasonmalicious.4af318
DeepInstinctMALICIOUS

How to remove Ulise.144497?

Ulise.144497 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment