Categories: Malware

Ursu.139527 (file analysis)

The Ursu.139527 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Ursu.139527 virus can do?

Executable code extraction
Creates RWX memory
The binary likely contains encrypted or compressed data.
Installs itself for autorun at Windows startup

How to determine Ursu.139527?


File Info:
crc32: BFC624B4md5: 7f953fa033fc1e4b0abe9b1889a38db2name: 7F953FA033FC1E4B0ABE9B1889A38DB2.mlwsha1: ba570d94aeceb7002ef64bbc9ac26d1c8d1fa4dcsha256: 6b8543f284eed7cf07ef40288c1bc6b197c30bca604ec1a560ffca5771d181e1sha512: fca669d2ddc756c90fc28551ea86ee3b79397eace4fbc3cca4d2d794be152fd562889229b13ff731465e129da41d3ad5e7b41673c6b3289fce34bd1d3f7d2aeassdeep: 12288:DJRXrQbx+q9Gq1QlaCuV7UzhHD2RnAyK8SNX5q1goIEocng1mJIAN8VxZSva6NHZ:DLe8c5CEoztD2ib8O5GIHcnNaxZSttHntype: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Ursu.139527 also known as:

Bkav	W32.AIDetectVM.malware1
Elastic	malicious (high confidence)
DrWeb	Trojan.Siggen7.25622
MicroWorld-eScan	Gen:Variant.Ursu.139527
FireEye	Generic.mg.7f953fa033fc1e4b
McAfee	Artemis!7F953FA033FC
Cylance	Unsafe
Sangfor	Malware
K7AntiVirus	Trojan ( 005257651 )
Alibaba	Trojan:Win32/Blamon.5044b56f
K7GW	Trojan ( 005257651 )
BitDefenderTheta	Gen:NN.ZedlaF.34590.TmOdauzKmIgi
Cyren	W32/Heuristic-162!Eldorado
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Kaspersky	Trojan.Win32.Blamon.byo
BitDefender	Gen:Variant.Ursu.139527
NANO-Antivirus	Trojan.Win32.Agent.eqaada
Paloalto	generic.ml
AegisLab	Trojan.Win32.Bjlog.lpqK
Tencent	Malware.Win32.Gencirc.1149563a
Ad-Aware	Gen:Variant.Ursu.139527
Emsisoft	Gen:Variant.Ursu.139527 (B)
Comodo	Backdoor.Win32.Popwin.~IQ@ogvrk
VIPRE	Trojan.Win32.Generic!BT
Invincea	Mal/Generic-R + Mal/Packer
McAfee-GW-Edition	BehavesLike.Win32.Injector.bc
Sophos	Mal/Packer
GData	Gen:Variant.Ursu.139527
Webroot	W32.Backdoor.Gen
MAX	malware (ai score=83)
Arcabit	Trojan.Ursu.D22107
ZoneAlarm	Trojan.Win32.Blamon.byo
VBA32	BScope.Trojan.Wacatac
ALYac	Gen:Variant.Ursu.139527
ESET-NOD32	a variant of Win32/Packed.BlackMoon.A potentially unwanted
Rising	Trojan.Kryptik!1.B3E8 (CLASSIC)
Yandex	Packed/NSPack
SentinelOne	DFI – Suspicious PE
AVG	FileRepMalware
Qihoo-360	Win32/Trojan.731