About “IL:Trojan.MSILMamut.6289” infection

The IL:Trojan.MSILMamut.6289 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What IL:Trojan.MSILMamut.6289 virus can do?

Authenticode signature is invalid
Binary compilation timestomping detected

How to determine IL:Trojan.MSILMamut.6289?


File Info:
name: 19143F87D825EFD1B761.mlw
path: /opt/CAPEv2/storage/binaries/4a8dfd24fe6b6e2c6903fa218497a1451f1a4324f235f5d35ae9d5c2500bff69
crc32: AF3037B4
md5: 19143f87d825efd1b7614232efca58b0
sha1: 046fb85baaf7e5ca1b02dc211b9aee41bdc07c75
sha256: 4a8dfd24fe6b6e2c6903fa218497a1451f1a4324f235f5d35ae9d5c2500bff69
sha512: 2d61d977c84d0db801850922c02b22d6f83669913304f05ea53d3a1334a37c07dd4f35c97e853ce638ea1c4c4b68c7af39692c9f9a3cd50f460016640e5c817a
ssdeep: 384:H3S/oDbQ9n62NgmMmQTMHEMw7M575hG3cctoicM8j:H30YbOL4La
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1EE82C636C6A04C3EE1FE2A3558B54642EFB0AB4B95129D1F7BBC015E1F73512C942F68
sha3_384: c531b7ddba5b9ea06687d87f5fd0583a603e39094aa893f3e55afe07c8fcc49d9e4d4b5764151855fb599758456d79e4
ep_bytes: ff250020400000000000000000000000
timestamp: 2096-12-21 09:58:48

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: streamer
FileVersion: 1.0.0.0
InternalName: talka6626.exe
LegalCopyright: Copyright ©  2022
LegalTrademarks: 
OriginalFilename: talka6626.exe
ProductName: streamer
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

IL:Trojan.MSILMamut.6289 also known as:

Bkav	W32.AIDetectNet.01
Lionic	Trojan.Win32.Mamut.4!c
MicroWorld-eScan	IL:Trojan.MSILMamut.6289
FireEye	Generic.mg.19143f87d825efd1
ALYac	IL:Trojan.MSILMamut.6289
Sangfor	Trojan.Win32.Agent.Vg0u
CrowdStrike	win/malicious_confidence_100% (W)
BitDefender	IL:Trojan.MSILMamut.6289
Arcabit	IL:Trojan.MSILMamut.D1891
BitDefenderTheta	Gen:NN.ZemsilF.34592.bm0@aKVwt3g
Elastic	malicious (high confidence)
TrendMicro-HouseCall	TROJ_GEN.R002H09HD22
Avast	Win32:TrojanX-gen [Trj]
Ad-Aware	IL:Trojan.MSILMamut.6289
McAfee-GW-Edition	RDN/Real Protect-LS
SentinelOne	Static AI – Suspicious PE
Emsisoft	IL:Trojan.MSILMamut.6289 (B)
APEX	Malicious
MAX	malware (ai score=80)
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	IL:Trojan.MSILMamut.6289
Google	Detected
AhnLab-V3	Malware/Win.RealProtect-LS.C5187696
McAfee	RDN/Real Protect-LS
Malwarebytes	Malware.AI.4201014268
Rising	Trojan.Generic/MSIL@AI.97 (RDM.MSIL:Ad+U9o0WPjqFU8ibxCxXzQ)
Ikarus	Trojan.MSIL.PSW
Fortinet	PossibleThreat
AVG	Win32:TrojanX-gen [Trj]

How to remove IL:Trojan.MSILMamut.6289?

IL:Trojan.MSILMamut.6289 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X