Categories: Trojan

IL:Trojan.MSILZilla.5105 (B) removal

The IL:Trojan.MSILZilla.5105 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What IL:Trojan.MSILZilla.5105 (B) virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Creates RWX memory
Guard pages use detected – possible anti-debugging.
Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Authenticode signature is invalid
Anomalous .NET characteristics
Sniffs keystrokes
Creates known Njrat/Bladabindi RAT registry keys

How to determine IL:Trojan.MSILZilla.5105 (B)?


File Info:
name: 6F1902C48D06F7535DEE.mlwpath: /opt/CAPEv2/storage/binaries/9d430c361fad557ec0f18282c34289608e49f81693e5148a4c2ee8566e5c2a68crc32: D4EAC8B6md5: 6f1902c48d06f7535deee600dece7994sha1: d52776d2c2c781ac4ec8a0b4f56ee448b953df2fsha256: 9d430c361fad557ec0f18282c34289608e49f81693e5148a4c2ee8566e5c2a68sha512: 00151f7de5f954790b000b081945fca263bd4c82df0d65b27a6991b13b8dd67d9e6a18944c2e962e55ae5974d13c2119cabdebaffd1db49692470cd928875ecdssdeep: 384:RCbP3tSX6vBq7lazgE68gQ6d/y5Q1Q0YtQWTItebrOFeqzCFp:OS6vBqMzs8dO/369r/ptype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T171E2194777B58115C2ED56F88DB3032046B1E3438532EB6F9CEC84DA8BA37E44242AE9sha3_384: d7b8cd1dc81665c49131472609be02a5c935e3b946515b62b0ae401624569d7e94bae16612839d700bc44792ef030354ep_bytes: ff250020400000000000000000000000timestamp: 2022-08-04 19:11:41
Version Info:
Translation: 0x0000 0x04b0FileDescription:  FileVersion: 0.0.0.0InternalName: Client.exeLegalCopyright:  OriginalFilename: Client.exeProductVersion: 0.0.0.0Assembly Version: 0.0.0.0

IL:Trojan.MSILZilla.5105 (B) also known as:

Bkav	W32.AIDetectNet.01
Elastic	malicious (high confidence)
MicroWorld-eScan	IL:Trojan.MSILZilla.5105
CAT-QuickHeal	Trojan.MsilFC.S20327749
ALYac	IL:Trojan.MSILZilla.5105
Cylance	Unsafe
VIPRE	IL:Trojan.MSILZilla.5105
Sangfor	Suspicious.Win32.Save.a
K7AntiVirus	Trojan ( 700000121 )
K7GW	Trojan ( 700000121 )
Cybereason	malicious.48d06f
Baidu	MSIL.Backdoor.Bladabindi.a
Cyren	W32/Razy.DC.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Bladabindi.AZ
APEX	Malicious
ClamAV	Win.Packed.njRAT-7445143-0
Kaspersky	HEUR:Trojan.MSIL.Crypt.gen
BitDefender	IL:Trojan.MSILZilla.5105
Avast	MSIL:Bladabindi-JK [Trj]
Tencent	Msil.Trojan.Crypt.Wptp
Ad-Aware	IL:Trojan.MSILZilla.5105
Emsisoft	IL:Trojan.MSILZilla.5105 (B)
Comodo	TrojWare.MSIL.Bladabindi.BGS@7lngf6
DrWeb	BackDoor.Bladabindi.16068
Zillya	Trojan.Bladabindi.Win32.119734
TrendMicro	Backdoor.MSIL.BLADABINDI.SMCET
McAfee-GW-Edition	BehavesLike.Win32.Generic.nz
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.6f1902c48d06f753
Sophos	Mal/Generic-S
SentinelOne	Static AI – Malicious PE
GData	MSIL.Backdoor.Bladabindi.AV
Avira	TR/Dropper.Gen7
MAX	malware (ai score=85)
Antiy-AVL	Trojan/Generic.ASMalwS.AF
Arcabit	IL:Trojan.MSILZilla.D13F1
Microsoft	Backdoor:MSIL/Bladabindi.SBR!MSR
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.RL_SpyGate.R356544
Acronis	suspicious
McAfee	Trojan-FSCB!6F1902C48D06
TACHYON	Trojan/W32.DN-Crypt.32768.C
Malwarebytes	Backdoor.Bladabindi
TrendMicro-HouseCall	Backdoor.MSIL.BLADABINDI.SMCET
Rising	Backdoor.njRAT!1.9E49 (CLASSIC)
Yandex	Trojan.Crypt!HsnAZQc7W8E
Ikarus	Trojan.MSIL.Bladabindi
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Bladabindi.HT!tr
BitDefenderTheta	Gen:NN.ZemsilF.34582.cm0@a4w4bsc
AVG	MSIL:Bladabindi-JK [Trj]
CrowdStrike	win/malicious_confidence_100% (W)