Categories: Malware

MSIL/AsyncRAT (file analysis)

The MSIL/AsyncRAT is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MSIL/AsyncRAT virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid
CAPE detected the AsyncRat malware family

How to determine MSIL/AsyncRAT?


File Info:
name: B26159574B8B5166CF51.mlwpath: /opt/CAPEv2/storage/binaries/de7665ce6f22c1ac64551d94ceb84818f85e673cae5af122773622b6c896734dcrc32: ABFE9194md5: b26159574b8b5166cf5120bd6760fd4bsha1: feae105fa3ea1f53398fea8328a07bc1d731722fsha256: de7665ce6f22c1ac64551d94ceb84818f85e673cae5af122773622b6c896734dsha512: c20bb5065d3f7363e40c8f1ea0c4798fc3994c98f033cf3f7fe21bcb65bee6d946eac074abaa72e0a224a48524331346e3d9541f1417b235237112dd8919c100ssdeep: 768:YuSBGTAo1wxWUpdj7mo2qLXMHgh/W96tPIRbR1m0bTi76v7ceFAXupr/4BDZrx:YuSBGTA2g2o/W9LRbBbTi7U7ceAupKdltype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T122232B003BE8812BF2BE4F74A9F262458677F5637602D58D2CC452D75A13FC68A426FEsha3_384: 1fb7dd573a23488292f9a57f92d99027f2152314d68fbc25a80c104d38e65ece3ff67711cef734ef690cdabbfced3ef6ep_bytes: ff250020400000000000000000000000timestamp: 2023-10-16 21:40:53
Version Info:
Translation: 0x0000 0x04b0Comments: CompanyName: FileDescription: FileVersion: 1.0.0.0InternalName: Stub.exeLegalCopyright: LegalTrademarks: OriginalFilename: Stub.exeProductName: ProductVersion: 1.0.0.0Assembly Version: 1.0.0.0

MSIL/AsyncRAT also known as:

Bkav	W32.AIDetectMalware.CS
DrWeb	Trojan.Siggen9.56514
MicroWorld-eScan	Gen:Trojan.Mardom.MN.13
CAT-QuickHeal	Trojan.IgenericFC.S14890850
Skyhigh	BehavesLike.Win32.Fareit.pm
ALYac	Gen:Trojan.Mardom.MN.13
Cylance	unsafe
VIPRE	Gen:Trojan.Mardom.MN.13
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 005678321 )
K7GW	Trojan ( 005678321 )
CrowdStrike	win/malicious_confidence_100% (D)
BitDefenderTheta	Gen:NN.ZemsilF.36680.cm0@aOysSPp
VirIT	Trojan.Win32.MSIL_Heur.A
Symantec	ML.Attribute.HighConfidence
Elastic	Windows.Trojan.Asyncrat
ESET-NOD32	a variant of MSIL/AsyncRAT
Cynet	Malicious (score: 100)
APEX	Malicious
ClamAV	Win.Packed.Razy-9625918-0
Kaspersky	HEUR:Backdoor.MSIL.Crysan.gen
BitDefender	Gen:Trojan.Mardom.MN.13
Avast	Win32:DropperX-gen [Drp]
Rising	Trojan.AntiVM!1.CF63 (CLASSIC)
Emsisoft	Gen:Trojan.Mardom.MN.13 (B)
F-Secure	Trojan.TR/Dropper.Gen
Zillya	Trojan.Agent.Win32.1426391
TrendMicro	Backdoor.MSIL.ASYNCRAT.SMXSR
Sophos	Troj/AsyncRat-B
Ikarus	Trojan.MSIL.Agent
GData	MSIL.Trojan.PSE.1BITXMO
Jiangmin	Backdoor.MSIL.gguk
Varist	W32/Samas.B.gen!Eldorado
Avira	TR/Dropper.Gen
Arcabit	Trojan.Mardom.MN.13
SUPERAntiSpyware	Trojan.Agent/Gen-Kryptik
ZoneAlarm	HEUR:Backdoor.MSIL.Crysan.gen
Microsoft	Backdoor:MSIL/AsyncRat.AD!MTB
Google	Detected
AhnLab-V3	Trojan/Win32.RL_Generic.R358277
McAfee	Fareit-FZT!B26159574B8B
VBA32	OScope.Backdoor.MSIL.Crysan
Malwarebytes	Generic.Malware.AI.DDS
Tencent	Trojan.Msil.Agent.zap
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Agent.CFQ!tr
AVG	Win32:DropperX-gen [Drp]
Cybereason	malicious.fa3ea1
DeepInstinct	MALICIOUS