What is “Ulise.325915”?

The Ulise.325915 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ulise.325915 virus can do?

The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Authenticode signature is invalid

How to determine Ulise.325915?


File Info:
name: 993BFB2FC4B690D66DF5.mlw
path: /opt/CAPEv2/storage/binaries/91547fb9b55514fd87c362385ce89b2b59a3cef4c32b7c0ac2dfd805d87da840
crc32: 8F64F2E8
md5: 993bfb2fc4b690d66df5dfaea54492ad
sha1: 5dcdf8c708ff0c8dc618295f6716dda527330c90
sha256: 91547fb9b55514fd87c362385ce89b2b59a3cef4c32b7c0ac2dfd805d87da840
sha512: 2c50efdc39f038901277512ec41d89397863818314cd22b7e9279a8a55ec5f1865111c95fe957aa3958c3117a5289738ec39e69691d3097445adcee2108c42f8
ssdeep: 6144:zuIlWqB+ihabs7Ch9KwyF5LePuIlWqB+ihabs7Ch9KwyF5LeLodpJ:q6Wq4aaE6KwyF5LR6Wq4aaE6KwyF5L08
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1A25412AF75A9B511EC7C72F5A8450093C570639D23FDDE79F4202062898F141AEEAF8E
sha3_384: 54987fef2cb9a4711f7b146b931ece937596c63e0cb43c19df6ce42528a7e738662e33b4facf30269b92169343a944e5
ep_bytes: 103ca450850efe6060ad17aa825d108b
timestamp: 2012-01-29 22:49:21

Version Info:
0: [No Data]

Ulise.325915 also known as:

Bkav	W32.AIDetect.malware1
Lionic	Trojan.Win32.Malicious.4!c
MicroWorld-eScan	Gen:Variant.Ulise.325915
FireEye	Generic.mg.993bfb2fc4b690d6
McAfee	GenericRXAA-AA!993BFB2FC4B6
Cylance	Unsafe
K7AntiVirus	Trojan ( 004bcce41 )
Alibaba	Trojan:Win32/HckPk.9afc6fa5
K7GW	Trojan ( 004bcce41 )
Cybereason	malicious.708ff0
Cyren	W32/Graftor.FU.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
TrendMicro-HouseCall	TROJ_GEN.R002C0PKR21
Paloalto	generic.ml
BitDefender	Gen:Variant.Ulise.325915
Avast	Win32:Malware-gen
Ad-Aware	Gen:Variant.Ulise.325915
Sophos	ML/PE-A + Mal/HckPk-A
Comodo	Packed.Win32.MUPX.Gen@24tbus
TrendMicro	TROJ_GEN.R002C0PKR21
McAfee-GW-Edition	BehavesLike.Win32.Generic.dc
Emsisoft	Gen:Variant.Ulise.325915 (B)
Ikarus	Trojan.Agent
GData	Gen:Variant.Ulise.325915
Antiy-AVL	Trojan/Generic.ASBOL.C6A4
Gridinsoft	Ransom.Win32.Sabsik.sa
Arcabit	Trojan.Ulise.D4F91B
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win.HT.R449841
ALYac	Gen:Variant.Ulise.325915
MAX	malware (ai score=81)
APEX	Malicious
Rising	Malware.Heuristic!ET#96% (RDMK:cmRtazonNZkHPC5cqmA4h314+G1r)
SentinelOne	Static AI – Malicious PE
Fortinet	W32/Graftor.FU!tr
AVG	Win32:Malware-gen
CrowdStrike	win/malicious_confidence_80% (W)

How to remove Ulise.325915?

Ulise.325915 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X