Categories: Malware

Ursu.767367 (file analysis)

The Ursu.767367 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Ursu.767367 virus can do?

Attempts to connect to a dead IP:Port (1 unique times)
Presents an Authenticode digital signature
Possible date expiration check, exits too soon after checking local time
Performs some HTTP requests

Related domains:

updateoss.xyhh.net

How to determine Ursu.767367?


File Info:
crc32: 6497E2A8md5: 98133343d07f48af1a767691311b12c8name: 98133343D07F48AF1A767691311B12C8.mlwsha1: 853d04a97cdf4d677586c4ed03160b90eff8dee8sha256: fae79c0780d73db42a4c59fb9c7147b421566b7e1d4b40a02199b071204d80ffsha512: 36c29b227b8e9038707e0fd538e556beb935173726de1492c1f2ed2324ee6967fe9e8639ab4fd496ee07d2e2e2c9684886a361c57b4014f36330ff445e56ab12ssdeep: 3072:Bkhw75le2pU+eu78xOEUuYn/U9xV8U9xV2VV2S:BIKle34zGTiVIStype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Ursu.767367 also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
Cylance	Unsafe
Sangfor	Riskware.Win32.Agent.ky
CrowdStrike	win/malicious_confidence_100% (D)
BitDefender	Gen:Variant.Ursu.767367
Symantec	Trojan.Gen.MBT
APEX	Malicious
Kaspersky	HEUR:Trojan-Downloader.Win32.Generic
Alibaba	TrojanDownloader:Win32/Generic.ffe9226d
MicroWorld-eScan	Gen:Variant.Ursu.767367
Tencent	Win32.Trojan-downloader.Generic.Hryh
BitDefenderTheta	AI:Packer.5C8C16931F
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	Artemis!Trojan
FireEye	Generic.mg.98133343d07f48af
Sophos	Mal/Generic-S
SentinelOne	Static AI – Suspicious PE
Jiangmin	TrojanDownloader.Generic.bfjy
Antiy-AVL	Trojan[Downloader]/Win32.AGeneric
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	Trojan:Win32/Ymacco.AAFA
AegisLab	Trojan.Win32.Generic.a!c
ZoneAlarm	UDS:DangerousObject.Multi.Generic
GData	Gen:Variant.Ursu.767367
AhnLab-V3	Malware/Win32.Generic.C4011005
McAfee	Artemis!98133343D07F
MAX	malware (ai score=83)
VBA32	suspected of Trojan.Downloader.gen.h
Malwarebytes	Generic.Malware/Suspicious
Panda	Trj/CI.A
Rising	Downloader.Generic!8.141 (CLOUD)
MaxSecure	Trojan.Malware.7175239.susgen
Fortinet	W32/Generic.X!tr.dldr
Paloalto	generic.ml