Categories: Backdoor

What is “Backdoor:MSIL/Mokes!MSR”?

The Backdoor:MSIL/Mokes!MSR is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Backdoor:MSIL/Mokes!MSR virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Dynamic (imported) function loading detected
Unconventionial language used in binary resources: Chinese (Simplified)
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Backdoor:MSIL/Mokes!MSR?


File Info:
name: DCDE74F81AD6361C53EB.mlwpath: /opt/CAPEv2/storage/binaries/cc10c90381719811def4bc31ff3c8e32c483c0eeffcb149df0b071e5a60d517bcrc32: 0E72965Bmd5: dcde74f81ad6361c53ebdc164879a25csha1: 640f7b475864bd266edba226e86672101bf6f5c9sha256: cc10c90381719811def4bc31ff3c8e32c483c0eeffcb149df0b071e5a60d517bsha512: 821b1a05601bbaee21cbd0b3cf2859359795ae55a3df8dea81f1142ede74b52af31273ffbbba772d77e40477853e6b02c9df8c44fc2ddad1cf3d248530427fc0ssdeep: 768:4Ke6r0NVnxxS6vobyOlWUpN3RdO6jVTBR2r/A7izRGUR/lHJ/d2uoe5N1Eyw0tr8:b3aV2xblpbOUf2U7Y1P/dfLttrLpStype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T10AC3271276418471F70D0B304946FAE04AAA9D3D5AE4E48FFA7C7E7A29312C31A7725Fsha3_384: b3b3847af758bbaefdb7c7e6942c4cf8672979ae0d69f0c34f5ceb1aa9de3c29e09d02a50bb520766185dea0572e941fep_bytes: e8952d0000e917feffff558bec81ec28timestamp: 2021-12-08 02:04:04
Version Info:
0: [No Data]

Backdoor:MSIL/Mokes!MSR also known as:

Lionic	Trojan.MSIL.Mokes.m!c
MicroWorld-eScan	Trojan.GenericKD.38281419
FireEye	Trojan.GenericKD.38281419
CAT-QuickHeal	Backdoor.MSIL
McAfee	RDN/Generic Downloader.x
Cylance	Unsafe
Zillya	Backdoor.Mokes.Win32.5082
Sangfor	Trojan.Win32.Agent.GAA
K7AntiVirus	Trojan-Downloader ( 0058b9041 )
Alibaba	Backdoor:MSIL/Mokes.f5256be1
K7GW	Trojan-Downloader ( 0058b9041 )
BitDefenderTheta	Gen:NN.ZexaF.34114.hqW@aWEXXVaj
VirIT	Trojan.Win32.Genus.KZX
Cyren	W32/Trojan.YKPX-6461
Symantec	Trojan.Gen.MBT
ESET-NOD32	Win32/TrojanDownloader.Agent.GAA
TrendMicro-HouseCall	TROJ_GEN.R011C0PLB21
Cynet	Malicious (score: 100)
Kaspersky	Backdoor.MSIL.Mokes.ck
BitDefender	Trojan.GenericKD.38281419
NANO-Antivirus	Trojan.Win32.Mokes.jjdbdt
Avast	Win32:BackdoorX-gen [Trj]
Tencent	Malware.Win32.Gencirc.10cf9f4f
Ad-Aware	Trojan.GenericKD.38281419
Sophos	Mal/Generic-S + Mal/Generic-L
DrWeb	Trojan.Inject4.21632
TrendMicro	TROJ_GEN.R011C0PLB21
McAfee-GW-Edition	RDN/Generic Downloader.x
Emsisoft	Trojan.GenericKD.38281419 (B)
APEX	Malicious
Jiangmin	Backdoor.MSIL.figz
MaxSecure	Trojan.Malware.10612570.susgen
MAX	malware (ai score=89)
Antiy-AVL	Trojan/Generic.ASMalwS.34E9BA7
Kingsoft	Win32.Hack.Undef.(kcloud)
Gridinsoft	Ransom.Win32.Sabsik.sa
Microsoft	Backdoor:MSIL/Mokes!MSR
ViRobot	Trojan.Win32.Z.Agent.122880.NWI
GData	Trojan.GenericKD.38281419
SentinelOne	Static AI – Suspicious PE
AhnLab-V3	Trojan/Win.Generic.R457419
VBA32	Trojan.Sabsik.FL
ALYac	Trojan.GenericKD.38281419
TACHYON	Backdoor/W32.Mokes.122880.C
Malwarebytes	Trojan.Crypt
Rising	Backdoor.Mokes!8.619 (CLOUD)
Yandex	Backdoor.Mokes!FoEeaNgazl0
Ikarus	Trojan-Downloader.Win32.Agent
Fortinet	W32/Agent.GAA!tr.dldr
Webroot	W32.Trojan.Gen
AVG	Win32:BackdoorX-gen [Trj]
Panda	Trj/CI.A
CrowdStrike	win/malicious_confidence_100% (W)