What is “IL:Trojan.MSILMamut.623”?

The IL:Trojan.MSILMamut.623 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What IL:Trojan.MSILMamut.623 virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine IL:Trojan.MSILMamut.623?


File Info:
name: 70A7B3855B629F5E8461.mlw
path: /opt/CAPEv2/storage/binaries/4599cbce4bbed6dd614d2134288de7f6377e917c6e4d95aac227c56372c32a06
crc32: 7D6C5092
md5: 70a7b3855b629f5e84612511636d2c2d
sha1: 4dce90b4882961acc950cfa345f8d21c12b8222a
sha256: 4599cbce4bbed6dd614d2134288de7f6377e917c6e4d95aac227c56372c32a06
sha512: 524b0002f57939ba7c775f6c4cb52e12c47239aeaa9c5366377d5de69034e5b850d3f94078b6499f32be4bdbec7f6ff458ad0785c3b68e3fed56bcbf2c109441
ssdeep: 98304:ROmEak4uspdg3fJvIQhR305IJjDaABmDDX:BkXIu05IJfaABe
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T13B16012232648C87FD2A66FA1011D500B3B62EC6D9DDC9C9BD9A35CE2DF4B434E25673
sha3_384: c474f9d0f710540ad1e2367b4fa1b7f9ecf62746b8cf29fadd3f1a72eaa96e28805f9e991bd99b2fe542032144ca98b4
ep_bytes: ff250020400000000000000000000000
timestamp: 2078-01-03 14:53:22

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: SkyCheats
FileVersion: 1.0.0.0
InternalName: SkyCheats.exe
LegalCopyright: Copyright ©  2022
LegalTrademarks: 
OriginalFilename: SkyCheats.exe
ProductName: SkyCheats
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

IL:Trojan.MSILMamut.623 also known as:

Bkav	W32.AIDetectNet.01
MicroWorld-eScan	IL:Trojan.MSILMamut.623
CAT-QuickHeal	Trojan.YakbeexMSIL.ZZ4
Cylance	Unsafe
VIPRE	IL:Trojan.MSILMamut.623
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of MSIL/AntiVM.A suspicious
BitDefender	IL:Trojan.MSILMamut.623
Avast	Win32:MiscX-gen [PUP]
Rising	PUA.AntiVM!8.1379E (TFE:dGZlOg1dH8O/fpDXwQ)
Ad-Aware	IL:Trojan.MSILMamut.623
DrWeb	Trojan.Siggen17.51805
FireEye	Generic.mg.70a7b3855b629f5e
Emsisoft	IL:Trojan.MSILMamut.623 (B)
SentinelOne	Static AI – Suspicious PE
GData	IL:Trojan.MSILMamut.623
MAX	malware (ai score=80)
Arcabit	IL:Trojan.MSILMamut.623
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.Generic.C5121835
Acronis	suspicious
ALYac	IL:Trojan.MSILMamut.623
Malwarebytes	Malware.AI.3924203301
Ikarus	Trojan-Downloader.MSIL.Agent
MaxSecure	Trojan.Malware.300983.susgen
BitDefenderTheta	Gen:NN.ZemsilF.34806.5p0@aeQeS0o
AVG	Win32:MiscX-gen [PUP]

How to remove IL:Trojan.MSILMamut.623?

IL:Trojan.MSILMamut.623 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X