IL:Trojan.MSILZilla.12917 (B) (file analysis)

The IL:Trojan.MSILZilla.12917 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What IL:Trojan.MSILZilla.12917 (B) virus can do?

Dynamic (imported) function loading detected
Authenticode signature is invalid
Anomalous .NET characteristics

How to determine IL:Trojan.MSILZilla.12917 (B)?


File Info:
name: 36FEA81D9AF8A4DD6FE5.mlw
path: /opt/CAPEv2/storage/binaries/e76288ffdb7f92fee58bcfc0c25df0596b19cd2a0dd047f137872d8e24f6f28b
crc32: 5B5C0B75
md5: 36fea81d9af8a4dd6fe5cf9e5c302665
sha1: 18131a3c99987f76b7bcba089a9f947e9c56c23e
sha256: e76288ffdb7f92fee58bcfc0c25df0596b19cd2a0dd047f137872d8e24f6f28b
sha512: 13f73ce10b6ada08f10f6470433a6c9d514ce2228d0c80f3099f10f1472a40db42a877953332d52e010463b906eea2064bc5775c1051ed316ffa96082747f983
ssdeep: 3072:y95zIO4uZ94Ihnneve1A2xjylGs3YzVUNk/fHO41y+fLKKIj5lkHB3:y95x
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T14964B83E1CBE123B91A4D6A6CFC58827F444E1BB31222D36A4D797998747D8329C317E
sha3_384: 963bb383bfdca5ded717a61e7ee968100097a2174f64bcb9fc0bb10ab06fde3e59123f9e155d0a25c976df657a7708b9
ep_bytes: ff250020400000000000000000000000
timestamp: 2022-01-03 21:47:16

Version Info:
Translation: 0x0000 0x04b0
FileDescription:  
FileVersion: 0.0.0.0
InternalName: hrXrBlRgRGKkBejPOsJCkzBIcAmTGGqH.exe
LegalCopyright:  
OriginalFilename: hrXrBlRgRGKkBejPOsJCkzBIcAmTGGqH.exe
ProductVersion: 0.0.0.0
Assembly Version: 0.0.0.0

IL:Trojan.MSILZilla.12917 (B) also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	IL:Trojan.MSILZilla.12917
FireEye	Generic.mg.36fea81d9af8a4dd
ALYac	IL:Trojan.MSILZilla.12917
Sangfor	Suspicious.Win32.Save.a
Alibaba	Trojan:Win32/Mdrop.d83f89c1
CrowdStrike	win/malicious_confidence_90% (W)
Arcabit	IL:Trojan.MSILZilla.D3275
BitDefenderTheta	Gen:NN.ZemsilF.34114.sm0@aCjvkSm
Symantec	ML.Attribute.HighConfidence
TrendMicro-HouseCall	TROJ_GEN.R002H09A422
Kaspersky	UDS:Trojan.Multi.GenericML.xnet
BitDefender	IL:Trojan.MSILZilla.12917
Avast	Win32:TrojanX-gen [Trj]
Ad-Aware	IL:Trojan.MSILZilla.12917
Emsisoft	IL:Trojan.MSILZilla.12917 (B)
McAfee-GW-Edition	BehavesLike.Win32.Generic.dz
Sophos	ML/PE-A + Mal/Mdrop-KT
Ikarus	Trojan.IL.MSILZilla
Avira	TR/Dropper.Gen
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	IL:Trojan.MSILZilla.12917
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.MSILZilla.R461511
McAfee	GenericRXRH-UE!36FEA81D9AF8
MAX	malware (ai score=86)
APEX	Malicious
SentinelOne	Static AI – Malicious PE
Fortinet	HTML/Phishing.DOC!tr
AVG	Win32:TrojanX-gen [Trj]
Cybereason	malicious.d9af8a

How to remove IL:Trojan.MSILZilla.12917 (B)?

IL:Trojan.MSILZilla.12917 (B) removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X