Categories: Malware

About “Generic.MSIL.Bladabindi.19240F09” infection

The Generic.MSIL.Bladabindi.19240F09 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.MSIL.Bladabindi.19240F09 virus can do?

Yara rule detections observed from a process memory dump/dropped files/CAPE
CAPE extracted potentially suspicious content
Authenticode signature is invalid
Anomalous .NET characteristics
Uses Windows utilities for basic functionality
CAPE detected the njRat malware family
Creates a copy of itself
Creates known Njrat/Bladabindi RAT registry keys

How to determine Generic.MSIL.Bladabindi.19240F09?


File Info:
name: 5E419CD5546C73F43269.mlwpath: /opt/CAPEv2/storage/binaries/73a37471271390700aae01ecb8c0c25990bd073d1a580bd103df26e3a4a568b3crc32: EAE44B69md5: 5e419cd5546c73f43269ffef578aacd4sha1: bdb5f7c9d0d988a963fd4366b66036c43869e97dsha256: 73a37471271390700aae01ecb8c0c25990bd073d1a580bd103df26e3a4a568b3sha512: 42eafb5faba120800300e46f94100d8af58e0876b2b296e4a6f5200573d2902c1a9603414990ded114b952f5750c402a4a2f114abf3873c50204cdb27d61ca1cssdeep: 384:XLfAGjjMicNPkOMrJHbKIStzJWOse0+IyaKur3HyHvHki2VzDyHvHhMkLDOHYCF6:bfAGjjMzkOwIaN6vkpVv6vNmF7Q71htype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T119E2E60537AA4703C67D03B90826471647F1CE83453BEB6F5CD9B4E91E7B7808E816ABsha3_384: 79ea3e387438c3fd6bebfee138d3d75a6ad9434b41b6201a91d946d628d0337a4bd34cb90f499c7bab01e1fb1a15aefbep_bytes: ff250020400000000000000000000000timestamp: 2022-08-21 13:51:57
Version Info:
Translation: 0x0000 0x04b0FileDescription:  FileVersion: 0.0.0.0InternalName: k.exeLegalCopyright:  OriginalFilename: k.exeProductVersion: 0.0.0.0Assembly Version: 0.0.0.0

Generic.MSIL.Bladabindi.19240F09 also known as:

Bkav	W32.AIDetectNet.01
Elastic	Windows.Trojan.Njrat
MicroWorld-eScan	Generic.MSIL.Bladabindi.19240F09
FireEye	Generic.mg.5e419cd5546c73f4
CAT-QuickHeal	Trojan.GenericFC.S6059376
McAfee	Trojan-FIGN
Cylance	Unsafe
Zillya	Worm.Bladabindi.Win32.7859
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Trojan ( 004b99501 )
BitDefender	Generic.MSIL.Bladabindi.19240F09
K7GW	Trojan ( 004b99501 )
Cybereason	malicious.5546c7
Baidu	MSIL.Backdoor.Bladabindi.a
VirIT	Trojan.Win32.Dnldr25.PBI
Cyren	W32/MSIL_Agent.CP.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Autorun.Agent.LW
Cynet	Malicious (score: 100)
APEX	Malicious
Avast	MSIL:Agent-CIB [Trj]
ClamAV	Win.Trojan.Generic-6417450-0
Kaspersky	HEUR:Trojan.Win32.Generic
Rising	Backdoor.njRAT!1.D4D6 (CLASSIC)
Ad-Aware	Generic.MSIL.Bladabindi.19240F09
Sophos	ML/PE-A + Mal/Bladabi-T
Comodo	Backdoor.MSIL.Bladabindi.BSS@7pzdvl
DrWeb	Trojan.DownLoader25.46117
VIPRE	Generic.MSIL.Bladabindi.19240F09
TrendMicro	BKDR_BLADABI.SMC
McAfee-GW-Edition	Trojan-FIGN
Emsisoft	Generic.MSIL.Bladabindi.19240F09 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	TrojanSpy.Agent.aaxh
Avira	TR/ATRAPS.Gen
Microsoft	Backdoor:MSIL/Bladabindi.BO
Arcabit	Generic.MSIL.Bladabindi.19240F09
SUPERAntiSpyware	Backdoor.NJRat/Variant
GData	MSIL.Backdoor.Bladabindi.AV
Google	Detected
AhnLab-V3	Win-Trojan/NjRAT01.Exp
Acronis	suspicious
BitDefenderTheta	Gen:NN.ZemsilF.34606.cm0@aaIWItp
ALYac	Generic.MSIL.Bladabindi.19240F09
Malwarebytes	Bladabindi.Backdoor.Njrat.DDS
Tencent	Trojan.Win32.Bladabindi.16000442
MAX	malware (ai score=87)
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	MSIL/Agent.LI!tr
AVG	MSIL:Agent-CIB [Trj]
CrowdStrike	win/malicious_confidence_100% (D)