Categories: Malware

What is “MSIL/Agent.CYT”?

The MSIL/Agent.CYT is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MSIL/Agent.CYT virus can do?

Dynamic (imported) function loading detected
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
CAPE detected the AsyncRat malware family
Binary compilation timestomping detected

How to determine MSIL/Agent.CYT?


File Info:
name: 47A13988760A070BEA4E.mlwpath: /opt/CAPEv2/storage/binaries/c0ad821298148ff4aa41c1da95124ce0cd936336d5952bb2e3bdcb298f3f2fa1crc32: DA5D2F38md5: 47a13988760a070bea4e1cc3e37f6a75sha1: 55b3c0b5bd04f0869c41da6239d605857c376c1csha256: c0ad821298148ff4aa41c1da95124ce0cd936336d5952bb2e3bdcb298f3f2fa1sha512: 4109c5d1c74aeb3982a2375c1c6aad38a1b9453ba449e01ccf05a1bbb71a3d0099cb0c19c1a164849192be1173a0207cee864c11c7f2b407216cc214b7bdfdabssdeep: 49152:w1WGJuZ/2dOltSNXfbBs8m5NeaC29XNLH+tMWJ0+s9:w1uZltAbBj9aC29XVHgMWJ07type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T181950241DB88148BDC3AAF31E1B0E6994A7BE5D1B8DE9FAC119D3D1C3C547819C02BB9sha3_384: 6739aa684a954fe40e2d7a73ff59fcbaf330ba736fd1ab6e5d31eeb3b9e3c3e67fc06a3910a7929dbae3a930ce903763ep_bytes: ff250020400000000000000000000000timestamp: 2076-09-08 06:46:04
Version Info:
Translation: 0x0000 0x04b0Comments: CompanyName: FileDescription: FileVersion: 1.0.0.0InternalName: Stub.exeLegalCopyright: LegalTrademarks: OriginalFilename: Stub.exeProductName: ProductVersion: 1.0.0.0Assembly Version: 1.0.0.0

MSIL/Agent.CYT also known as:

Lionic	Trojan.MSIL.Crysan.m!c
Elastic	malicious (high confidence)
MicroWorld-eScan	IL:Trojan.MSILZilla.2050
FireEye	Generic.mg.47a13988760a070b
CAT-QuickHeal	Trojan.YakbeexMSIL.ZZ4
McAfee	Artemis!47A13988760A
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 0056c3561 )
Alibaba	Backdoor:MSIL/Crysan.f46f9897
K7GW	Trojan ( 0056c3561 )
Cybereason	malicious.8760a0
Cyren	W32/Trojan.WAZV-7165
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Agent.CYT
APEX	Malicious
Avast	Win32:RATX-gen [Trj]
Kaspersky	HEUR:Backdoor.MSIL.Crysan.gen
BitDefender	IL:Trojan.MSILZilla.2050
Rising	Backdoor.AsyncRAT!1.C678 (CLASSIC)
Ad-Aware	IL:Trojan.MSILZilla.2050
Emsisoft	IL:Trojan.MSILZilla.2050 (B)
TrendMicro	TROJ_GEN.R002C0WKQ21
McAfee-GW-Edition	BehavesLike.Win32.Trojan.tc
Paloalto	generic.ml
GData	IL:Trojan.MSILZilla.2050
Avira	HEUR/AGEN.1143184
Microsoft	Trojan:Win32/Wacatac.B!ml
Cynet	Malicious (score: 100)
BitDefenderTheta	Gen:NN.ZemsilF.34062.7n0@aGoqyen
ALYac	IL:Trojan.MSILZilla.2050
MAX	malware (ai score=88)
Malwarebytes	Backdoor.AsyncRAT
TrendMicro-HouseCall	TROJ_GEN.R002C0WKQ21
Tencent	Msil.Backdoor.Crysan.Pefx
Yandex	Trojan.Agent!NVY6vQoby/w
SentinelOne	Static AI – Malicious PE
Fortinet	MSIL/CoinMiner.CFQ!tr
AVG	Win32:RATX-gen [Trj]
Panda	Trj/GdSda.A
CrowdStrike	win/malicious_confidence_100% (W)