Categories: Malware

Ursu.263620 information

The Ursu.263620 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Ursu.263620 virus can do?

Executable code extraction
Performs some HTTP requests
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary likely contains encrypted or compressed data.
Network activity detected but not expressed in API logs

Related domains:

www.4399atfz.top

daohang1.oss-cn-beijing.aliyuncs.com

xddh.oss-cn-beijing.aliyuncs.com

dawnconfig.oss-cn-shenzhen.aliyuncs.com

ocsp.globalsign.com

crl.globalsign.net

ocsp2.globalsign.com

crl.globalsign.com

How to determine Ursu.263620?


File Info:
crc32: C1ACD302md5: 5eca01c4b7bdc690a1ef65cd7ed213cdname: 5ECA01C4B7BDC690A1EF65CD7ED213CD.mlwsha1: 8728c193b7a3a14201dbd322d9e4042f5bdc9e5dsha256: 248d9b847aadde8a47d9166676be05b2b60acc8d533aff6d8b3b942cdb03fd5bsha512: bb1d4312912d7b5dcfc26270348f8ad77e65392d25d71ebdd4dcd616f684e2ea2693576a3872b7a5f62596e2bbb898d311b7c5cebc50fa7ed430fa7d7d12f38essdeep: 12288:B/QHMLqt7PWQjgUU/g+UNEJD2HCh1Rfj9Vhgi8NeW+bmn/Yy8DVWPP+wUkxlj:RQHz/jgUU/gaDkCXRBVhgpPWi7ftype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: x5f3ax54e5 x7248x6743x6240x6709FileVersion: 1.0.0.0CompanyName: x5f3ax54e5Comments: x9690x9038x6e38x620fx52a9x624bProductName: x9690x9038x6e38x620fx52a9x624bProductVersion: 1.0.0.0FileDescription: x9690x9038x6e38x620fx52a9x624bTranslation: 0x0804 0x04b0

Ursu.263620 also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Trojan ( 005246d51 )
Elastic	malicious (high confidence)
DrWeb	Trojan.Siggen15.19089
Cynet	Malicious (score: 99)
ALYac	Gen:Variant.Ursu.263620
Cylance	Unsafe
Zillya	Trojan.Blamon.Win32.137
Sangfor	Trojan.Win32.FakeIE.B
Alibaba	Trojan:Win32/Blamon.badb54ca
K7GW	Trojan ( 005246d51 )
Cybereason	malicious.4b7bdc
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Packed.FlyStudio.AA potentially unwanted
APEX	Malicious
Avast	Win32:Malware-gen
ClamAV	Win.Malware.Generic-9820446-0
Kaspersky	Trojan.Win32.Blamon.dgq
BitDefender	Gen:Variant.Ursu.263620
NANO-Antivirus	Trojan.Win32.BlackMoon.ffzepf
MicroWorld-eScan	Gen:Variant.Ursu.263620
Tencent	Win32.Trojan.Blamon.Tapm
Ad-Aware	Gen:Variant.Ursu.263620
Sophos	Mal/Generic-S
Comodo	Malware@#3k2qh3lzy3fid
BitDefenderTheta	Gen:NN.ZexaF.34266.@G3ba88KTNaH
McAfee-GW-Edition	BehavesLike.Win32.BadFile.fc
FireEye	Generic.mg.5eca01c4b7bdc690
Emsisoft	Gen:Variant.Ursu.263620 (B)
SentinelOne	Static AI – Suspicious PE
Jiangmin	Trojan.Blamon.iq
Avira	TR/Blamon.wujvp
eGambit	Unsafe.AI_Score_100%
Antiy-AVL	Trojan/Generic.ASCommon.FA
Microsoft	Trojan:Win32/Occamy.C24
GData	Win32.Trojan.PSE.161Z26R
Acronis	suspicious
McAfee	Artemis!5ECA01C4B7BD
MAX	malware (ai score=98)
VBA32	BScope.Trojan.Spambot
Malwarebytes	Malware.AI.3756638980
Panda	Trj/GdSda.A
Yandex	Trojan.GenAsa!VtnNR8+Smmc
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Blamon.DGQ!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml