Categories: Malware

What is “Ursu.860913”?

The Ursu.860913 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Ursu.860913 virus can do?

Creates RWX memory
A process attempted to delay the analysis task.
Attempts to connect to a dead IP:Port (6 unique times)
Performs some HTTP requests
Steals private information from local Internet browsers
Attempts to access Bitcoin/ALTCoin wallets
Attempts to create or modify system certificates
Collects information to fingerprint the system

Related domains:

telete.in

apps.identrust.com

flowerpowergrandmother.top

ocsp.digicert.com

How to determine Ursu.860913?


File Info:
crc32: 3D9A6674md5: 294f343637d89d297d59e11e29f006d9name: upload_filesha1: 214afe8093c2d6c79723847974368fe110ddbfc8sha256: d162942cf9bbe1e62aed8bd959a526d1215d2bafec68d37dab8a6d056c8b3d2esha512: 45eabb2245c0fa06e9eb0039d2b690dbfc32e8700ca6e3f4dc0daf44469085b2e45aa44260addbb383f6a4615eb8f72d377c26abf0682c0404de50bb7e348001ssdeep: 12288:3puqsIZeRgEGkTEpDZnDspaf5S0U0f+L46RDMRD4aLFTukLNZQxuYr5/9L:5u1ICgEGkGnDsc0L0fHn+r51Ltype: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Ursu.860913 also known as:

Bkav	W32.AIDetectVM.malware2
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Ursu.860913
FireEye	Generic.mg.294f343637d89d29
ALYac	Gen:Variant.Ursu.860913
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Malware
K7AntiVirus	Spyware ( 0054b8f11 )
BitDefender	Gen:Variant.Ursu.860913
K7GW	Spyware ( 005712d51 )
CrowdStrike	win/malicious_confidence_70% (D)
Invincea	Generic ML PUA (PUA)
BitDefenderTheta	Gen:NN.ZedlaF.34590.Jq4@ay1EeI
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	Win32:Trojan-gen
ClamAV	Win.Malware.Ulise-7344017-0
Kaspersky	Trojan-PSW.Win32.Racealer.hps
NANO-Antivirus	Trojan.Win32.Racealer.hwcldl
Tencent	Malware.Win32.Gencirc.11afa958
Ad-Aware	Gen:Variant.Ursu.860913
F-Secure	Trojan.TR/AD.StellarStealer.sxyui
DrWeb	Trojan.PWS.Stealer.29291
Zillya	Trojan.Racealer.Win32.1005
McAfee-GW-Edition	BehavesLike.Win32.Dropper.hh
Emsisoft	Gen:Variant.Ursu.860913 (B)
Jiangmin	Trojan.PSW.Racealer.bjs
Avira	TR/AD.StellarStealer.sxyui
MAX	malware (ai score=89)
Antiy-AVL	Trojan[PSW]/Win32.Racealer
Microsoft	Trojan:Win32/CryptInject!ml
Arcabit	Trojan.Ursu.DD22F1
AhnLab-V3	Trojan/Win32.Raccoon.R329741
ZoneAlarm	Trojan-PSW.Win32.Racealer.hps
GData	Gen:Variant.Ursu.860913
Cynet	Malicious (score: 85)
ESET-NOD32	a variant of Win32/Spy.Agent.PQZ
McAfee	GenericRXAA-AA!294F343637D8
VBA32	TrojanPSW.Racealer
Malwarebytes	Spyware.PasswordStealer
Panda	Trj/GdSda.A
Rising	Stealer.Raccoon!1.BD9D (CLASSIC)
Yandex	TrojanSpy.Agent!EjmqyoaJX5A
Ikarus	Trojan-Spy.Agent
eGambit	Unsafe.AI_Score_99%
Fortinet	W32/Racealer.HPS!tr.pws
AVG	Win32:Trojan-gen
Qihoo-360	Win32/Trojan.PSW.b3f