Categories: Trojan

IL:Trojan.MSILZilla.24962 removal

The IL:Trojan.MSILZilla.24962 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What IL:Trojan.MSILZilla.24962 virus can do?

CAPE extracted potentially suspicious content
Drops a binary and executes it
Authenticode signature is invalid
Anomalous .NET characteristics
Behavioural detection: Injection (Process Hollowing)
Behavioural detection: Injection (inter-process)
CAPE detected the StormKitty malware family
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine IL:Trojan.MSILZilla.24962?


File Info:
name: 2CD58F76A0E312B9BFBE.mlwpath: /opt/CAPEv2/storage/binaries/f596a14fd42e5ca077e29d87fe44046fc879790800a6435ee71c3701891e8f07crc32: 98FBE62Fmd5: 2cd58f76a0e312b9bfbee9f52342c4a7sha1: 4d3bd4706b3f96694b41a2140795ef686f5807f3sha256: f596a14fd42e5ca077e29d87fe44046fc879790800a6435ee71c3701891e8f07sha512: e4f5e1e962510540b78540307b015d6dee0687b19d0af76bc8cf092818eb89910651aa3e88941dee670e5bca2b9d47bf700b03dae0dd775f8b2f3d492d92bb6fssdeep: 6144:Bar4Z7hBiwLh0PQNPyJicDyThS9THacFfCXMr3nNeT/hrjM+190eoxaoAOVd:B64zBiQ0PQ0JicmOHa6fTnNeT/RjMA9Qtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1FC84F7C26B817B92E9C2FD716B5244072367DCF8A3865B7340C8D3502CE1AE5FE5EA52sha3_384: 897d1c3b2224b9a3f2ac2e7fdf5f826e411c1a5660ce76cc5c52d972fea94a223b6ea08b2524f880356f56bc448366ddep_bytes: ff250020400000000000000000000000timestamp: 2023-06-03 10:27:03
Version Info:
Translation: 0x0000 0x04b0FileDescription:  FileVersion: 0.0.0.0InternalName: eettetete.exeLegalCopyright:  OriginalFilename: eettetete.exeProductVersion: 0.0.0.0Assembly Version: 0.0.0.0

IL:Trojan.MSILZilla.24962 also known as:

Lionic	Trojan.Win32.Generic.mein
Elastic	malicious (high confidence)
MicroWorld-eScan	IL:Trojan.MSILZilla.24962
FireEye	Generic.mg.2cd58f76a0e312b9
CAT-QuickHeal	PUA.MsilFC.S6059847
McAfee	GenericRXDZ-SJ!2CD58F76A0E3
Malwarebytes	Generic.Trojan.Delf.DDS
K7AntiVirus	Trojan ( 0049464d1 )
Alibaba	Trojan:MSIL/Injector.71f3bd26
K7GW	Trojan ( 0049464d1 )
Cybereason	malicious.6a0e31
BitDefenderTheta	Gen:NN.ZemsilF.36250.xm0@a4CqsPj
Cyren	W32/Ransom.AY.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Injector.CQI
APEX	Malicious
ClamAV	Win.Packed.Zusy-7171717-0
Kaspersky	HEUR:Trojan.MSIL.Generic
BitDefender	IL:Trojan.MSILZilla.24962
NANO-Antivirus	Trojan.Win32.AVKill.dbocez
Avast	MSIL:GenMalicious-COE [Trj]
Tencent	Malware.Win32.Gencirc.13c7f5ec
Emsisoft	IL:Trojan.MSILZilla.24962 (B)
F-Secure	Trojan.TR/Dropper.MSIL.Gen
DrWeb	Trojan.AVKill.17790
VIPRE	IL:Trojan.MSILZilla.24962
TrendMicro	Backdoor.Win32.ASYNCRAT.YXDFCZ
McAfee-GW-Edition	BehavesLike.Win32.Generic.fh
Trapmine	malicious.high.ml.score
Sophos	Mal/MSIL-TK
SentinelOne	Static AI – Malicious PE
GData	IL:Trojan.MSILZilla.24962
Google	Detected
Avira	TR/Dropper.MSIL.Gen
Antiy-AVL	Trojan/MSIL.Injector
Arcabit	IL:Trojan.MSILZilla.D6182
ZoneAlarm	HEUR:Trojan.MSIL.Generic
Microsoft	Trojan:MSIL/Injector.RB!MSR
Cynet	Malicious (score: 100)
AhnLab-V3	Dropper/Win32.Agent.C71366
Acronis	suspicious
ALYac	IL:Trojan.MSILZilla.24962
MAX	malware (ai score=84)
Cylance	unsafe
Panda	Trj/CI.A
TrendMicro-HouseCall	Backdoor.Win32.ASYNCRAT.YXDFCZ
Rising	Trojan.Injector!8.C4 (CLOUD)
Ikarus	Backdoor.Win32.DarkKomet
Fortinet	MSIL/Dropper.BEC!tr
AVG	MSIL:GenMalicious-COE [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)