Categories: Trojan

About “IL:Trojan.MSILZilla.23561 (B)” infection

The IL:Trojan.MSILZilla.23561 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What IL:Trojan.MSILZilla.23561 (B) virus can do?

Sample contains Overlay data
Reads data out of its own binary image
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine IL:Trojan.MSILZilla.23561 (B)?


File Info:
name: 7C5F29FD6FE1C2D7ED5A.mlwpath: /opt/CAPEv2/storage/binaries/067f3cb7d8bd3c57df79dc5e2f14f24358df6f73b9b6c8f8d58f339fd88532dbcrc32: 962537C8md5: 7c5f29fd6fe1c2d7ed5a4be7ee5cd174sha1: 2a762dcc49e0255b7508d6e0be0bc4bc480bd8d3sha256: 067f3cb7d8bd3c57df79dc5e2f14f24358df6f73b9b6c8f8d58f339fd88532dbsha512: 4d27594ae073fe56044a18c7a06d55cf853e78361563c7f3f44e5a26c0f362189647413e465eba4ca99516f21afe882ce02e2a16f552cce15acb5aa90a3f38d4ssdeep: 98304:r3XTXR1sGHW3R2YppCuTXodz8su2gUmrj:rXTXRbKAUC+y8YKtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1991623216E5A48B3C3052F32A17DAF887B757FBA93E50BC6C3284A3DAD52195D133274sha3_384: e67eb577684ade761e142d450bba53d0c29dfe0f4d8ae49bc7641890fc3ac4fe1529be113d8477d66c60819ce5b0c5d1ep_bytes: e866050000e978feffffcccccccccccctimestamp: 2022-03-03 13:15:57
Version Info:
0: [No Data]

IL:Trojan.MSILZilla.23561 (B) also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
MicroWorld-eScan	IL:Trojan.MSILZilla.23561
FireEye	Generic.mg.7c5f29fd6fe1c2d7
ALYac	IL:Trojan.MSILZilla.23561
CrowdStrike	win/malicious_confidence_60% (D)
Cyren	W64/MSIL_Troj.BOX.gen!Eldorado
ESET-NOD32	a variant of MSIL/Kryptik.ACRC
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan-Ransom.MSIL.Blocker.gen
BitDefender	IL:Trojan.MSILZilla.23561
Avast	Win64:CrypterX-gen [Trj]
Emsisoft	IL:Trojan.MSILZilla.23561 (B)
VIPRE	IL:Trojan.MSILZilla.23561
McAfee-GW-Edition	BehavesLike.Win32.Generic.rc
Trapmine	suspicious.low.ml.score
Sophos	Generic ML PUA (PUA)
Ikarus	Malware.Win32.PureMiner
GData	IL:Trojan.MSILZilla.23561
Avira	HEUR/AGEN.1250759
Arcabit	IL:Trojan.MSILZilla.D5C09
ZoneAlarm	HEUR:Trojan-Ransom.MSIL.Blocker.gen
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Acronis	suspicious
MAX	malware (ai score=80)
Rising	Trojan.Generic/MSIL@AI.100 (RDM.MSIL:wrZZWwvaLmDQfDG/Xpnjxg)
SentinelOne	Static AI – Malicious SFX
Fortinet	MSIL/Kryptik.ACRC!tr
AVG	Win64:CrypterX-gen [Trj]