Categories: Malware

What is “Generic.MSIL.Bladabindi.4553AF52”?

The Generic.MSIL.Bladabindi.4553AF52 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.MSIL.Bladabindi.4553AF52 virus can do?

Behavioural detection: Executable code extraction – unpacking
Yara rule detections observed from a process memory dump/dropped files/CAPE
CAPE extracted potentially suspicious content
Drops a binary and executes it
Authenticode signature is invalid
Anomalous .NET characteristics
Uses Windows utilities for basic functionality
CAPE detected the njRat malware family
Creates a copy of itself

How to determine Generic.MSIL.Bladabindi.4553AF52?


File Info:
name: 46623F451754DF84A4EF.mlwpath: /opt/CAPEv2/storage/binaries/884207e6813a422f0fe468bb46f298963513f236905ea40800a91b400c574fe6crc32: 929ED0AFmd5: 46623f451754df84a4ef9c37f4afc642sha1: 0a503cb6f80c6fc579d854deaa0499653395f574sha256: 884207e6813a422f0fe468bb46f298963513f236905ea40800a91b400c574fe6sha512: 25becdcf8e1b1a49c013e2c3b9ce55038be9a3d663c855beb4ef0d390c5f2d170fd2599c58209504a513208ddb2182b0b75f8f5e22612ec71b073130867caf3dssdeep: 1536:cGSmf5/ZnBRICJ3LmxqE8+nYrhjxiTOV94vzW4Xh85Z6xRP:cGSmf5/ZBRICtmxqE8+nYrhjkfvsSRtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T15EC3E8556F48CD14E39CB2F8E472A24CC1B4FA5229DBCB19DDE624A94B3EF426C9F101sha3_384: 03aea29ca544e5bb3bee2b5faf49f6fd9675e433afe0955289bccdd1f7d402e708f199f68062d0c80239f7596ce6611fep_bytes: ff250020400000000000000000000000timestamp: 2012-11-02 15:01:11
Version Info:
0: [No Data]

Generic.MSIL.Bladabindi.4553AF52 also known as:

Bkav	W32.AIDetectNet.01
Elastic	malicious (high confidence)
DrWeb	Trojan.MulDrop13.2717
MicroWorld-eScan	Generic.MSIL.Bladabindi.4553AF52
FireEye	Generic.mg.46623f451754df84
CAT-QuickHeal	Worm.Necast.J3
McAfee	Trojan-FIGN
Cylance	Unsafe
VIPRE	Generic.MSIL.Bladabindi.4553AF52
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Trojan ( 700000121 )
K7GW	Trojan ( 700000121 )
CrowdStrike	win/malicious_confidence_100% (W)
BitDefenderTheta	Gen:NN.ZemsilF.34592.hmW@aKvrhZc
VirIT	Trojan.Win32.Packed2_c.AWBD
Cyren	W32/MSIL_Troj.AP.gen!Eldorado
Symantec	Backdoor.Ratenjay!gen1
ESET-NOD32	a variant of MSIL/Bladabindi.AZ
APEX	Malicious
TrendMicro-HouseCall	WORM_PCUT.SMA
ClamAV	Win.Trojan.B-468
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Generic.MSIL.Bladabindi.4553AF52
NANO-Antivirus	Trojan.Win32.Autoruner.ctqpfj
Avast	MSIL:Agent-CIB [Trj]
Tencent	Trojan.Win32.Bladabindi.16000442
Ad-Aware	Generic.MSIL.Bladabindi.4553AF52
Emsisoft	Generic.MSIL.Bladabindi.4553AF52 (B)
Comodo	TrojWare.MSIL.Spy.Agent.EF@4r4nna
Baidu	MSIL.Backdoor.Bladabindi.a
Zillya	Trojan.Bladabindi.Win32.20283
TrendMicro	BKDR_BLADABI.SMC
McAfee-GW-Edition	BehavesLike.Win32.Generic.cm
Trapmine	suspicious.low.ml.score
Sophos	ML/PE-A + Mal/MSIL-GL
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan/Generic.apkbt
Google	Detected
Avira	TR/Agent.5587925
MAX	malware (ai score=84)
Antiy-AVL	Trojan/Generic.ASMalwS.24D
Microsoft	Backdoor:MSIL/Bladabindi.AJ
GData	Generic.MSIL.Bladabindi.4553AF52
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.RL_Generic.C4013419
Acronis	suspicious
ALYac	Generic.MSIL.Bladabindi.4553AF52
Malwarebytes	Backdoor.Bladabindi
Rising	Trojan.Agent!1.9DB7 (CLASSIC)
Yandex	Trojan.Agent!n5LDe0OVp34
Ikarus	Trojan-Spy.HawkEye
MaxSecure	Trojan.MSIL.Bladabindi.b
Fortinet	MSIL/Agent.PPV!tr
AVG	MSIL:Agent-CIB [Trj]
Cybereason	malicious.51754d
Panda	Generic Malware