Trojan

IL:Trojan.MSILZilla.4682 (B) information

Malware Removal

The IL:Trojan.MSILZilla.4682 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What IL:Trojan.MSILZilla.4682 (B) virus can do?

  • Dynamic (imported) function loading detected
  • CAPE extracted potentially suspicious content
  • Authenticode signature is invalid
  • Binary compilation timestomping detected

How to determine IL:Trojan.MSILZilla.4682 (B)?



File Info:

name: 50E93C67DA9F28860D75.mlw
path: /opt/CAPEv2/storage/binaries/1f39dc7edc87a861160313ee71180247f69a71e9f7ab49b5a31a6eb9410ba016
crc32: 77E97292
md5: 50e93c67da9f28860d753574a3c2acf3
sha1: 1e76ce61f2154fd51ff5b06802b50f964d9ec52c
sha256: 1f39dc7edc87a861160313ee71180247f69a71e9f7ab49b5a31a6eb9410ba016
sha512: 2374a22f725f1cc37ae19ccde68dec0a811563f618393553308d0f8cff7df71d2624667be09a00737c708f13dee80864fdfddfed1a559eb9baab8ddd2f89e1d3
ssdeep: 3072:oG6ee4jMLDzhAnPnL/nn2CJPNTnhnVsplzr2Thu4nlnmLntTntEi0bYy/nWnwFe0:oGVe
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T18CC50F29ABFA831DFACB35D89B146E6593FFFFF696738C8E001152961774102086538B
sha3_384: 7e402db11e4cb4fc274fc8e62ecc3b5ef5760e1e49659655d5aeaa991d23fe053eb822bb37cf962acd66b223106d35fe
ep_bytes: ff250020400000000000000000000000
timestamp: 2083-03-16 13:23:01


Version Info:

Comments: Bc54as43cd794a5O4FdO9713c1lLo
CompanyName: Bc54as43cd794a5O4FdO9713c1lLo Inc.
FileDescription: Bc54as43cd794a5O4FdO9713c1lLo
FileVersion: 6.918.372.733
LegalCopyright: All Rights Reserved
InternalName: Bc54as43cd794a5O4FdO9713c1lLo.exe
LegalTrademarks: Bc54as43cd794a5O4FdO9713c1lLo
OriginalFilename: Bc54as43cd794a5O4FdO9713c1lLo.exe
ProductName: Bc54as43cd794a5O4FdO9713c1lLo
ProductVersion: 6.918.372.733
Assembly Version: 6.918.372.733
Translation: 0x0000 0x0514

IL:Trojan.MSILZilla.4682 (B) also known as:

LionicTrojan.MSIL.Bladabindi.m!c
Elasticmalicious (high confidence)
MicroWorld-eScanIL:Trojan.MSILZilla.4682
FireEyeGeneric.mg.50e93c67da9f2886
CAT-QuickHealBackdoor.MSIL
McAfeeGenericRXOY-WJ!50E93C67DA9F
CylanceUnsafe
ZillyaTrojan.Kryptik.Win32.3640206
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 0057da801 )
AlibabaBackdoor:MSIL/Bladabindi.6c934f26
K7GWTrojan ( 0057da801 )
Cybereasonmalicious.1f2154
BitDefenderThetaGen:NN.ZemsilF.34084.zo0@aiSevEai
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/Kryptik.ABHQ
TrendMicro-HouseCallTROJ_GEN.R002C0PL321
Paloaltogeneric.ml
KasperskyHEUR:Backdoor.MSIL.Bladabindi.gen
BitDefenderIL:Trojan.MSILZilla.4682
AvastWin32:Malware-gen
TencentMsil.Backdoor.Bladabindi.Swbh
Ad-AwareIL:Trojan.MSILZilla.4682
EmsisoftIL:Trojan.MSILZilla.4682 (B)
DrWebTrojan.Siggen15.60676
TrendMicroTROJ_GEN.R002C0PL321
McAfee-GW-EditionBehavesLike.Win32.Dropper.vz
SentinelOneStatic AI – Malicious PE
SophosMal/Generic-S
APEXMalicious
GDataIL:Trojan.MSILZilla.4682
JiangminBackdoor.MSIL.fhye
AviraHEUR/AGEN.1145832
Antiy-AVLTrojan/Generic.ASMalwS.34E2F23
MicrosoftTrojan:Win32/Wacatac.B!ml
CynetMalicious (score: 100)
VBA32TScope.Trojan.MSIL
ALYacIL:Trojan.MSILZilla.4682
MAXmalware (ai score=84)
MalwarebytesTrojan.Crypt.MSIL.Generic
YandexTrojan.Kryptik!AWXzLlBUTzw
IkarusTrojan.MSIL.Crypt
FortinetMSIL/Kryptik.ABHQ!tr
AVGWin32:Malware-gen
PandaTrj/GdSda.A
CrowdStrikewin/malicious_confidence_60% (D)

How to remove IL:Trojan.MSILZilla.4682 (B)?

IL:Trojan.MSILZilla.4682 (B) removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment