Trojan

IL:Trojan.MSILZilla.39546 (file analysis)

Malware Removal

The IL:Trojan.MSILZilla.39546 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What IL:Trojan.MSILZilla.39546 virus can do?

  • CAPE extracted potentially suspicious content
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid
  • Anomalous .NET characteristics

How to determine IL:Trojan.MSILZilla.39546?


File Info:

name: 51F72015B2E81BF8A409.mlw
path: /opt/CAPEv2/storage/binaries/3d7c20d9100cab464592b0f8268b60320c17e306549224239a0afd21bc232639
crc32: 9CFB01D1
md5: 51f72015b2e81bf8a409d00659feb8b1
sha1: 03d260121b712c8f3e8e33392b92568cf1a24cc9
sha256: 3d7c20d9100cab464592b0f8268b60320c17e306549224239a0afd21bc232639
sha512: 349467d64c616eb1f91ddcd14c81b2fbc91d1a97546b52ae85fe98f2f9ff5453797f0467900d8db7b1e20d06a4f2a66534e36c5edfba164008f51a778c16e648
ssdeep: 1536:4+rjk5IvhCDIzdbbDvOe2RYEJju4deeMgSPM+IOsXDoFmym0Hf+4fWC67X6qT3UY:J8epC8949debPl6DoFmy5HfTfjqzT
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T193A302D70DD5825EDAC885B4CE90A9840E70F0A45A733FB583A9299E4D6EF29C73037D
sha3_384: 2eb641ac7ca1ebf75c8c57702c3f3aee4f4be830679f86f598de5ac82693c96693a895cfe6323784cfe49fa54cdf9b5d
ep_bytes: ff250020400000000000000000000000
timestamp: 2024-02-29 16:58:41

Version Info:

Translation: 0x0000 0x04b0
FileDescription:
FileVersion: 0.0.0.0
InternalName: Crypted.EXE
LegalCopyright:
OriginalFilename: Crypted.EXE
ProductVersion: 0.0.0.0
Assembly Version: 0.0.0.0

IL:Trojan.MSILZilla.39546 also known as:

BkavW32.AIDetectMalware.CS
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanIL:Trojan.MSILZilla.39546
FireEyeGeneric.mg.51f72015b2e81bf8
SkyhighBehavesLike.Win32.Generic.cc
McAfeeArtemis!51F72015B2E8
Cylanceunsafe
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:MSIL/Injector.5d42f730
K7GWTrojan ( 004dcb4e1 )
K7AntiVirusTrojan ( 004dcb4e1 )
BitDefenderThetaGen:NN.ZemsilF.36744.gm0@aWXuWH
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/Injector.MOF
APEXMalicious
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderIL:Trojan.MSILZilla.39546
SUPERAntiSpywareTrojan.Agent/Gen-Virtool
AvastWin32:RATX-gen [Trj]
EmsisoftIL:Trojan.MSILZilla.39546 (B)
F-SecureTrojan.TR/Dropper.Gen
VIPREIL:Trojan.MSILZilla.39546
TrendMicroTROJ_GEN.R002C0RBT24
Trapminemalicious.moderate.ml.score
SophosMal/DotNet-C
SentinelOneStatic AI – Malicious PE
GoogleDetected
AviraTR/Dropper.Gen
Antiy-AVLTrojan/Win32.Wacatac
Kingsoftmalware.kb.c.1000
MicrosoftTrojan:Win32/Wacatac.B!ml
ArcabitIL:Trojan.MSILZilla.D9A7A
ZoneAlarmHEUR:Trojan.Win32.Generic
GDataIL:Trojan.MSILZilla.39546
VaristW32/ABTrojan.JVVY-2537
VBA32CIL.StupidPInvoker-2.Heur
ALYacIL:Trojan.MSILZilla.39546
MAXmalware (ai score=82)
MalwarebytesSpyware.PasswordStealer
PandaTrj/GdSda.A
TrendMicro-HouseCallTROJ_GEN.R002C0RBT24
RisingMalware.Obfus/MSIL@AI.83 (RDM.MSIL2:EuXkav6ooo6/1iz81pRzOg)
IkarusTrojan.MSIL.Injector
FortinetMSIL/Injector.MOF!tr
AVGWin32:RATX-gen [Trj]
Cybereasonmalicious.21b712
DeepInstinctMALICIOUS

How to remove IL:Trojan.MSILZilla.39546?

IL:Trojan.MSILZilla.39546 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment