Categories: Malware

About “Ulise.365500” infection

The Ulise.365500 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Ulise.365500 virus can do?

Behavioural detection: Executable code extraction – unpacking
CAPE extracted potentially suspicious content
Drops a binary and executes it
Authenticode signature is invalid
Creates a copy of itself

How to determine Ulise.365500?


File Info:
name: F405B5B727160A16CE42.mlwpath: /opt/CAPEv2/storage/binaries/bc948a7382cf5ffc2784711c25e9aada8066098dd34afcfef11bf8b3a7b4b4a4crc32: 3EF64B63md5: f405b5b727160a16ce42f65312a83be6sha1: 188cc215d341daaa88d1353b1d6794414653de39sha256: bc948a7382cf5ffc2784711c25e9aada8066098dd34afcfef11bf8b3a7b4b4a4sha512: 98e100b31daac2813434c5d9ec41aa92825f6b0f6d0cad1a67f3260c5b7def205cb935d3dd9fd40b2f6642f9d90bfc8cd684b8acaab47d596a2968e2ae49de4dssdeep: 3072:4LB9LDGcHUXNEBk11ww2t4mD941p6IlWjnK5:47Ktd+k11wNimD94PnlWjtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T103B33A1AF629C015C25087BC1FA59A794DE2EF758AD30EC7334CEFBC097A791682E215sha3_384: c627c18d6ee1c0f055dfb5dfd5f2d7ac234d8bc3c225fbf7f73fd4f7e45f2298f2f602428211543770c7f2ca4ff8d82bep_bytes: 558bec6aff68a88f400068c870400064timestamp: 2022-05-17 06:04:24
Version Info:
FileDescription: MIDIDevDemo v2 MFC ApplicationFileVersion: 1, 0, 0, 1InternalName: MIDIDevDemo v2LegalCopyright: Copyright (C) 2002OriginalFilename: MIDIDevDemo v2.EXEProductName: MIDIDevDemo v2 ApplicationProductVersion: 1, 0, 0, 1Translation: 0x0409 0x04b0

Ulise.365500 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Lotok.m!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Ulise.365500
FireEye	Generic.mg.f405b5b727160a16
CAT-QuickHeal	Trojan.Ghostratcrypt
Skyhigh	GenericRXTK-KM!F405B5B72716
McAfee	GenericRXTK-KM!F405B5B72716
Malwarebytes	Generic.Malware.AI.DDS
VIPRE	Gen:Variant.Ulise.365500
Sangfor	Suspicious.Win32.Save.ins
K7AntiVirus	Trojan ( 005565491 )
BitDefender	Gen:Variant.Ulise.365500
K7GW	Trojan ( 005565491 )
Cybereason	malicious.5d341d
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Injector.EGZV
Cynet	Malicious (score: 100)
APEX	Malicious
ClamAV	Win.Trojan.Gh0stRAT-9955419-1
Kaspersky	HEUR:Backdoor.Win32.Lotok.gen
Alibaba	Backdoor:Win32/GhostRatCrypt.07283a00
NANO-Antivirus	Trojan.Win32.Lotok.jpbnak
ViRobot	Trojan.Win.Z.Lotok.110592
Rising	Backdoor.Shellex!1.E4E9 (CLASSIC)
TACHYON	Backdoor/W32.Lotok.110592.D
Sophos	Troj/Farfli-DZ
F-Secure	Trojan.TR/Injector.wqufb
DrWeb	Trojan.MulDrop20.8056
Zillya	Trojan.Injector.Win32.1538045
TrendMicro	TROJ_GEN.R011C0DK723
Trapmine	malicious.moderate.ml.score
Emsisoft	Gen:Variant.Ulise.365500 (B)
Ikarus	Trojan.Win32.Injector
GData	Win32.Trojan.PSE.13T9OSM
Jiangmin	Backdoor.Lotok.avj
Varist	W32/ABRisk.YQOD-4345
Avira	TR/Injector.wqufb
Antiy-AVL	Trojan[Backdoor]/Win32.Lotok
Arcabit	Trojan.Ulise.D593BC
ZoneAlarm	HEUR:Backdoor.Win32.Lotok.gen
Microsoft	Trojan:Win32/GhostRatCrypt.GA!MTB
Google	Detected
AhnLab-V3	Backdoor/Win.Zegost.R565610
ALYac	Gen:Variant.Ulise.365500
MAX	malware (ai score=82)
DeepInstinct	MALICIOUS
VBA32	BScope.TrojanPSW.Cabal
Cylance	unsafe
Panda	Trj/Chgt.AD
TrendMicro-HouseCall	TROJ_GEN.R011C0DK723
Tencent	Backdoor.Win32.Lotok.zc
Yandex	Trojan.Injector!gs7FJdNXAFU
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.102820574.susgen
Fortinet	W32/Farfli.BSIK!tr
AVG	Win32:RATX-gen [Trj]
Avast	Win32:RATX-gen [Trj]
CrowdStrike	win/malicious_confidence_100% (W)