Categories: Trojan

What is “IL:Trojan.MSILZilla.6415”?

The IL:Trojan.MSILZilla.6415 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What IL:Trojan.MSILZilla.6415 virus can do?

Yara rule detections observed from a process memory dump/dropped files/CAPE
Presents an Authenticode digital signature
Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Authenticode signature is invalid
Anomalous binary characteristics

How to determine IL:Trojan.MSILZilla.6415?


File Info:
name: 87519CF5437ED9575584.mlwpath: /opt/CAPEv2/storage/binaries/d62964a6e700e5befee9e0e68a0f2b5d50655cbf7cc3f44c34c314a2fb5e408bcrc32: 4DDA84C1md5: 87519cf5437ed95755843bd70de9ebd4sha1: e0d46907960df78ea3a05804a13102d1fc4953dfsha256: d62964a6e700e5befee9e0e68a0f2b5d50655cbf7cc3f44c34c314a2fb5e408bsha512: 925c979d8cf3a706352419c034bb45068e3f0124a726d1da0e15ac3663cf7dfead3151404c58e9baa9c1ff5f2a0bca8850e89a121c9df9a3082218f85607fd79ssdeep: 6144:677NV9LAFzsNKGlPf83ohkQevJ3ve4AG6LxJjerXPZ5epV5pbYqMi8Ej4MlS/SJe:oV5AJsDnbCvJlfevYqMi8EXCfgwtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1DA254E303F97DE08D4395B3C0838818553B67E5ABBD4C65E2789325C9E32A57CF22E66sha3_384: 1a6ff4ed9cd95033487d7d7a699c2c17f702a520eb6bcc6d92212556f5d06c4c5155e94def3ba6c2e09230418c5634b7ep_bytes: ff250020400000000000000000000000timestamp: 2021-10-01 16:25:28
Version Info:
Comments: 쁢쁞쁢쁧쁢쁳쁞삘삁삏쁸삏삥쁤삄CompanyName: 쁢쁞쁢쁧쁢쁳쁞삘삁삏쁸삏삥쁤삄 Inc.FileDescription: 쁢쁞쁢쁧쁢쁳쁞삘삁삏쁸삏삥쁤삄FileVersion: 4.193.981.662LegalCopyright: All Rights ReservedInternalName: 쁢쁞쁢쁧쁢쁳쁞삘삁삏쁸삏삥쁤삄.exeLegalTrademarks: 쁢쁞쁢쁧쁢쁳쁞삘삁삏쁸삏삥쁤삄OriginalFilename: 쁢쁞쁢쁧쁢쁳쁞삘삁삏쁸삏삥쁤삄.exeProductName: 쁢쁞쁢쁧쁢쁳쁞삘삁삏쁸삏삥쁤삄ProductVersion: 4.193.981.662Assembly Version: 4.193.981.662Translation: 0x0000 0x0514

IL:Trojan.MSILZilla.6415 also known as:

Lionic	Trojan.MSIL.Stealer.l!c
Elastic	malicious (high confidence)
MicroWorld-eScan	IL:Trojan.MSILZilla.6415
FireEye	IL:Trojan.MSILZilla.6415
CAT-QuickHeal	Trojan.MsilFC.S24738231
ALYac	IL:Trojan.MSILZilla.6415
Cylance	Unsafe
Zillya	Trojan.Kryptik.Win32.3599282
Sangfor	Trojan.MSIL.Stealer.gen
K7AntiVirus	Trojan ( 005887c11 )
Alibaba	TrojanSpy:MSIL/Stealer.3b8e5a65
K7GW	Trojan ( 005887c11 )
Cyren	W32/MSIL_Troj.BOC.gen!Eldorado
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of MSIL/Kryptik.ACZU
Kaspersky	HEUR:Trojan-Spy.MSIL.Stealer.gen
BitDefender	IL:Trojan.MSILZilla.6415
Avast	Win32:Malware-gen
Tencent	Msil.Trojan-spy.Stealer.Eadd
Sophos	Mal/Generic-S
DrWeb	Trojan.PWS.Steam.20755
TrendMicro	TROJ_GEN.R002C0PJC21
McAfee-GW-Edition	GenericRXQG-JZ!87519CF5437E
Emsisoft	IL:Trojan.MSILZilla.6415 (B)
Ikarus	Trojan.MSIL.Crypt
Jiangmin	TrojanSpy.MSIL.bvfc
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
ViRobot	Trojan.Win32.S.Agent.1039176
GData	IL:Trojan.MSILZilla.6415
AhnLab-V3	Trojan/Win.JZ.C4702285
McAfee	GenericRXQG-JZ!87519CF5437E
VBA32	TScope.Trojan.MSIL
Malwarebytes	Spyware.Stealer.MSIL
TrendMicro-HouseCall	TROJ_GEN.R002C0PJC21
Yandex	Trojan.Kryptik_AGen!4O14AcOJjb4
SentinelOne	Static AI – Suspicious PE
Fortinet	W32/Malicious_Behavior.VEX
AVG	Win32:Malware-gen
Panda	Trj/GdSda.A
CrowdStrike	win/malicious_confidence_60% (W)