Categories: Malware

What is “Generic.MSIL.Bladabindi.70D84546”?

The Generic.MSIL.Bladabindi.70D84546 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.MSIL.Bladabindi.70D84546 virus can do?

Attempts to connect to a dead IP:Port (1 unique times)
Creates RWX memory
Uses Windows utilities for basic functionality
Sniffs keystrokes
Installs itself for autorun at Windows startup

Related domains:

maj.majnetgroup.net

How to determine Generic.MSIL.Bladabindi.70D84546?


File Info:
crc32: 8C260B25md5: 2ddbd6874445421ffe661c742e1fdd2fname: 2DDBD6874445421FFE661C742E1FDD2F.mlwsha1: f045af62159a16d17be2f51e0f78281f58e5ec83sha256: bf2a921f905ef2e1e191eccbfdb98e3e249c7aebe7d27b24dbe1de35c4707d6fsha512: 96256516279095e96aafc2e71161ca3ac392e1ce055a20286838b5b38fc702898478f76954a381866394cb35cc704c885c101be53c6fb9606dd828b500b421a5ssdeep: 384:WMCINl7rZt4AgSTnd5fGmjmumqD418+eYKGBsbh0w4wlAokw9OhgOL1vYRGOZzp:f7v4AgMdgmjAq8XeIBKh0p29SgRzntype: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Version Info:
0: [No Data]

Generic.MSIL.Bladabindi.70D84546 also known as:

Elastic	malicious (high confidence)
DrWeb	Trojan.DownLoader10.20382
MicroWorld-eScan	Generic.MSIL.Bladabindi.70D84546
FireEye	Generic.mg.2ddbd6874445421f
CAT-QuickHeal	Backdoor.Bladabindi.AL3
ALYac	Generic.MSIL.Bladabindi.70D84546
Cylance	Unsafe
VIPRE	Trojan.MSIL.Bladabindi.agxy (v)
CrowdStrike	win/malicious_confidence_100% (D)
BitDefender	Generic.MSIL.Bladabindi.70D84546
K7GW	Trojan ( 700000121 )
K7AntiVirus	Trojan ( 700000121 )
BitDefenderTheta	Gen:NN.ZemsilF.34670.bmW@aSuaRvg
Cyren	W32/MSIL_Bladabindi.A.gen!Eldorado
Symantec	Backdoor.Ratenjay
TotalDefense	Win32/DotNetDl.A!generic
APEX	Malicious
ClamAV	Win.Trojan.B-468
Kaspersky	HEUR:Trojan.Win32.Generic
NANO-Antivirus	Trojan.Win32.Dwn.dbxzfj
ViRobot	Backdoor.Win32.Bladabindi.Gen.A
Ad-Aware	Generic.MSIL.Bladabindi.70D84546
Sophos	ML/PE-A + Mal/Bbindi-C
Comodo	TrojWare.MSIL.Bladabindi.KX@52g0y5
F-Secure	Trojan.TR/ATRAPS.Gen
Baidu	MSIL.Backdoor.Bladabindi.a
Zillya	Trojan.Bladabindi.Win32.14960
TrendMicro	BKDR_BLADABI.SMC
McAfee-GW-Edition	BehavesLike.Win32.Trojan.mm
Emsisoft	Generic.MSIL.Bladabindi.70D84546 (B)
Ikarus	Backdoor.MSIL.Bladabindi
Jiangmin	TrojanDropper.Autoit.dce
MaxSecure	Trojan.Malware.300983.susgen
Avira	TR/ATRAPS.Gen
Antiy-AVL	Trojan[Backdoor]/MSIL.Bladabindi.as
Kingsoft	Heur.SSC.2678338.1216.(kcloud)
Microsoft	Backdoor:MSIL/Bladabindi.AJ
Arcabit	Generic.MSIL.Bladabindi.70D84546
SUPERAntiSpyware	Trojan.Agent/Gen-Barys
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	MSIL.Backdoor.Bladabindi.AV
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Bladabindi.C202658
Acronis	suspicious
McAfee	Trojan-FIGN
MAX	malware (ai score=83)
VBA32	Trojan.MSIL.Disfa
Malwarebytes	Trojan.Agent.MSIL
ESET-NOD32	a variant of MSIL/Bladabindi.AS
TrendMicro-HouseCall	BKDR_BLADABI.SMC
Rising	Backdoor.Njrat!1.9E49 (CLASSIC)
Yandex	Trojan.RatJn.Gen.MG
SentinelOne	Static AI – Malicious PE
eGambit	RAT.njRat
Fortinet	MSIL/Agent.PPV!tr
Webroot	W32.Backdoor.Gen
AVG	MSIL:Agent-BXF [Trj]
Cybereason	malicious.744454
Avast	MSIL:Agent-BXF [Trj]
Qihoo-360	HEUR/QVM03.0.AA9B.Malware.Gen