Categories: Malware

What is “Exploit:O97M/CVE-2017-11882.YJ!MTB”?

The Exploit:O97M/CVE-2017-11882.YJ!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Exploit:O97M/CVE-2017-11882.YJ!MTB virus can do?

A process attempted to delay the analysis task.
A potential decoy document was displayed to the user
Network activity detected but not expressed in API logs

Related domains:

mehranschool.org

How to determine Exploit:O97M/CVE-2017-11882.YJ!MTB?


File Info:
crc32: 815922CFmd5: d59c9184227cee4f08878c235de2b0e9name: upload_filesha1: ad386c0177ed1459cbf3788f7de188d10879a221sha256: 4142c699741f78550bf7da24da74ee7a4a996fb6b62324bec7d7584c50bc8e7dsha512: df27ebb5d83cbb35adaa1ce507489d3604bdab373ed68f016e6988eec075ba9afebafaad82adf0e294284ebc5af81aafaeae9e317b34bc0b704b6a0acd5efd19ssdeep: 12288:p5KuImyoiBtphyFdDxT2/PeeaVUGJNj7eimWKwcuNaESFVDbgau:7liBtphybh2nevVUGJR7B6ZWZSfDbXutype: Microsoft Excel 2007+
Version Info:
0: [No Data]

Exploit:O97M/CVE-2017-11882.YJ!MTB also known as:

MicroWorld-eScan	Trojan.GenericKD.34394102
FireEye	Trojan.GenericKD.34394102
McAfee	Exploit-GAF!ED78C0294B8B
BitDefender	Trojan.GenericKD.34394102
K7AntiVirus	Trojan ( 00567a471 )
TrendMicro	TROJ_CVE20171182.SM
Cyren	CVE-2017-11882.C.gen!Camelot
Symantec	Exp.CVE-2017-11882!g2
TrendMicro-HouseCall	TROJ_CVE20171182.SM
Avast	Win32:ShellCode [Expl]
Kaspersky	HEUR:Exploit.MSOffice.Generic
Alibaba	Exploit:Win32/CVE-2017-11882.113439e7
ViRobot	XLS.Z.CVE-2017-1188.501684
AegisLab	Hacktool.MSOffice.Generic.3!c
Ad-Aware	Trojan.GenericKD.34394102
F-Secure	Exploit.EXP/CVE-2017-11882.Gen
DrWeb	W97M.DownLoader.2938
Invincea	Exp/20180802-B
Sophos	Exp/20180802-B
Ikarus	Exploit.CVE-2017-11882
GData	Trojan.GenericKD.34394102
Avira	EXP/CVE-2017-11882.Gen
MAX	malware (ai score=100)
Microsoft	Exploit:O97M/CVE-2017-11882.YJ!MTB
Arcabit	Trojan.Generic.D20CCFF6
ZoneAlarm	HEUR:Exploit.MSOffice.Generic
Cynet	Malicious (score: 85)
AhnLab-V3	OLE/Cve-2017-11882.Gen
TACHYON	Suspicious/XOX.CVE-2017-11882
Zoner	Probably Heur.W97NativeOnly
ESET-NOD32	probably a variant of Win32/Exploit.CVE-2017-11882.B
Tencent	Office.Exploit.Generic.Wrqi
SentinelOne	DFI – Malicious OPENXML
Fortinet	MSOffice/CVE_2017_11882.C!exploit
AVG	Win32:ShellCode [Expl]
Qihoo-360	Generic/Trojan.Exploit.ed7