Categories: Trojan

BScope.Trojan.MTA.01233 (file analysis)

The BScope.Trojan.MTA.01233 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What BScope.Trojan.MTA.01233 virus can do?

Authenticode signature is invalid
Creates known Allaple worm mutexes
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine BScope.Trojan.MTA.01233?


File Info:
name: 263FF8979494D571A243.mlwpath: /opt/CAPEv2/storage/binaries/5d1204a4a607794a5b3b80e12af9d691650affb42af2c3c639e179bbfb4fccb7crc32: 99624A84md5: 263ff8979494d571a243cfd2c7d4d445sha1: ee01dc6fc937fc9c7b3dd203e8ff0abde3e9f488sha256: 5d1204a4a607794a5b3b80e12af9d691650affb42af2c3c639e179bbfb4fccb7sha512: 9c6fe95a560c2be51f8d81d4593c1b67e4e996a9d94bb1dd830acc0a287b394bf2f7b96a38e86f69fe26da33af3117e1978e1030c891fa24af710256d805b5b6ssdeep: 3072:g/PdlPo/KfWQeOCKWmgXGN69Rz2mmpmKj:IlgQROV2mKtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T177B31871E253A426CC75053C9749E3FE8DECEA336704887B9BC8CD262DB4BA1DB12546sha3_384: 6dbdc9ead64757ae5521cc3219b4848f3bb94bcb3b470fe7559b619bd4d46527d5803ea6af264f29a3fa159ac1aff937ep_bytes: e8eb0200006803800000e845090000e8timestamp: 2006-11-28 21:04:54
Version Info:
0: [No Data]

BScope.Trojan.MTA.01233 also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Eb.ts5c
Elastic	malicious (high confidence)
MicroWorld-eScan	Generic.Dacic.4254EF66.A.A2550686
FireEye	Generic.mg.263ff8979494d571
CAT-QuickHeal	Worm.Allaple.B4
Skyhigh	BehavesLike.Win32.ExploitDcomRpc.ch
ALYac	Generic.Dacic.4254EF66.A.A2550686
Malwarebytes	Generic.Malware.AI.DDS
Sangfor	Suspicious.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
BitDefender	Generic.Dacic.4254EF66.A.A2550686
K7GW	Trojan ( 004e40051 )
K7AntiVirus	Trojan ( 004e40051 )
BitDefenderTheta	AI:Packer.59F6A7B91E
VirIT	Backdoor.Win32.SdBot.AFCX
Symantec	W32.Spybot.Worm
ESET-NOD32	a variant of Win32/Allaple.NAC
APEX	Malicious
ClamAV	Win.Malware.Sfwx-9853337-0
Kaspersky	Trojan.Win32.Eb.dgo
Alibaba	Worm:Win32/Kolab.e8e7
NANO-Antivirus	Trojan.Win32.Allaple.bgryk
ViRobot	Backdoor.Win32.A.Rbot.110592.AI
Rising	Backdoor.IRCbot!8.B47 (TFE:2:CfLXO7FBrXI)
Sophos	Mal/IRCBot-B
Baidu	Win32.Worm.Rbot.a
F-Secure	Worm.WORM/Rbot.Gen
DrWeb	Trojan.Starman
VIPRE	Generic.Dacic.4254EF66.A.A2550686
TrendMicro	TROJ_GEN.R002C0CH223
Emsisoft	Generic.Dacic.4254EF66.A.A2550686 (B)
SentinelOne	Static AI – Malicious PE
MAX	malware (ai score=84)
Jiangmin	Worm/Generic.zfq
Google	Detected
Avira	WORM/Rbot.Gen
Varist	W32/Allaple.I.gen!Eldorado
Antiy-AVL	Trojan[Backdoor]/Win32.Rbot
Kingsoft	malware.kb.a.1000
Microsoft	Trojan:Win32/IRCBor.LK!MTB
Xcitium	MalCrypt.Indus!@1qrzi1
Arcabit	Generic.Dacic.4254EF66.A.A2550686
ZoneAlarm	Trojan.Win32.Eb.dgo
GData	Win32.Trojan.PSE1.C1KH17
Cynet	Malicious (score: 100)
AhnLab-V3	Worm/Win32.Allaple.R34300
Acronis	suspicious
McAfee	Exploit-DcomRpc.c.gen
TACHYON	Trojan/W32.Eb.108544
DeepInstinct	MALICIOUS
VBA32	BScope.Trojan.MTA.01233
Cylance	unsafe
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	TROJ_GEN.R002C0CH223
Tencent	Trojan.Win32.Eb.ha
Ikarus	Backdoor.Win32.Allaple
MaxSecure	Trojan.Malware.184606469.susgen
Fortinet	W32/Allaple.NAC!worm
AVG	Win32:Allaple-D [Trj]
Cybereason	malicious.fc937f
Avast	Win32:Allaple-D [Trj]