What is “Ursu.174007 (B)”?

The Ursu.174007 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ursu.174007 (B) virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Authenticode signature is invalid

How to determine Ursu.174007 (B)?


File Info:
name: B377A8F8D8EFCF75698C.mlw
path: /opt/CAPEv2/storage/binaries/5a531858288e46d489ea40653371ec0566347a4befb5c2eb59cf232aca799603
crc32: F4E5BFC4
md5: b377a8f8d8efcf75698cbeeaac668bc0
sha1: 19e87021e1b5ab973d71285abed2f31fdbefb253
sha256: 5a531858288e46d489ea40653371ec0566347a4befb5c2eb59cf232aca799603
sha512: 86d9b9384cda483f84db17d172fb05ef2e26657f02394bec5cbbe4a5464fa00d32fb740f51907db41f2f78f03df421c4a35036ed579047eeb58877b9011453a2
ssdeep: 24576:mVYVIUV3wPMvVftpNuEBczEs9B6UjF72pGk4ZAt6RrtgvwRqkPGkx/t19QpndnNl:HVV3NVAEs9B6UjF1Z/LDxlkNl
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1F9F52829DB94EB33D15F23BFE9B283942734E5C8A742E74B128CE6E53C813191D89197
sha3_384: 75c6cd76627c55c56ed6c3e34e54768a24f45f50eeae6d13ac77e6a6f8274dd7dcb21a9b1ded42bb37ab4c4a781416e1
ep_bytes: ff259420730000000000000000006820
timestamp: 2021-12-10 19:06:26

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: Stealer
FileVersion: 1.0.0.0
InternalName: Stealer.exe
LegalCopyright: Copyright ©  2021
LegalTrademarks: 
OriginalFilename: Stealer.exe
ProductName: Stealer
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Ursu.174007 (B) also known as:

Lionic	Trojan.Win32.Ursu.4!c
MicroWorld-eScan	Gen:Variant.Ursu.174007
FireEye	Gen:Variant.Ursu.174007
ALYac	Gen:Variant.Ursu.174007
APEX	Malicious
BitDefender	Gen:Variant.Ursu.174007
Avast	Win32:Malware-gen
Ad-Aware	Gen:Variant.Ursu.174007
Emsisoft	Gen:Variant.Ursu.174007 (B)
GData	Gen:Variant.Ursu.174007
MAX	malware (ai score=81)
Microsoft	Trojan:Win32/Wacatac.B!ml
McAfee	Generic PWS.dx
VBA32	Trojan.MSIL.gen.11
Malwarebytes	Spyware.PasswordStealer
TrendMicro-HouseCall	TROJ_GEN.R002H06LA21
AVG	Win32:Malware-gen
Cybereason	malicious.8d8efc
MaxSecure	Trojan.Malware.300983.susgen

How to remove Ursu.174007 (B)?

Ursu.174007 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X