MSIL/HackTool.Crypter.ME malicious file

The MSIL/HackTool.Crypter.ME is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/HackTool.Crypter.ME virus can do?

CAPE extracted potentially suspicious content
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine MSIL/HackTool.Crypter.ME?


File Info:
name: 5F1FE3CCB9A2986C2FCE.mlw
path: /opt/CAPEv2/storage/binaries/2603068d90b611c2615675558ffe67a610ccf717b6d5c10a527e3cbc87a2038b
crc32: 2D88A6DA
md5: 5f1fe3ccb9a2986c2fcef3a360f79857
sha1: a96ecd1393357ef8de1cc39d48e76278d34e59a7
sha256: 2603068d90b611c2615675558ffe67a610ccf717b6d5c10a527e3cbc87a2038b
sha512: a5fc918abaa2cc5eae1ad89c7865af6bc1f953a427ff1272422dacc2b493d3aeef1971aa9c3d0479dccb3c135c75d5bd066a0bb2c7ea4737a1b3508c9e262b96
ssdeep: 768:FOj4IlI+62Q7BVDnipsiGaXPWfdCd0YNfd0YNIantj4IlI+6G:s3RQXrcmafWfdCdhNfdhN/3/
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T15C63072A129AEA6BC47E8BB10520114F477C9E27D562EF1AACC773CFCDB72405F0165A
sha3_384: 37cf284d1845ebd9c94e71dee461240b23cec976da2362eef011fe50db1577e9e018376597e51b3900a95a3f9fed37a5
ep_bytes: ff250020400000000000000000000000
timestamp: 2017-07-19 03:14:46

Version Info:
Translation: 0x0000 0x04b0
FileDescription: Crypter V2.8 MDSH
FileVersion: 1.0.0.0
InternalName: Crypter V2.8 MDSH.exe
LegalCopyright: Copyright ©  2017
OriginalFilename: Crypter V2.8 MDSH.exe
ProductName: Crypter V2.8 MDSH
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

MSIL/HackTool.Crypter.ME also known as:

Bkav	W32.AIDetectMalware.CS
Lionic	Trojan.Win32.Generic.4!c
DrWeb	Trojan.MulDropNET.21
Skyhigh	GenericRXWF-IE!5F1FE3CCB9A2
McAfee	GenericRXWF-IE!5F1FE3CCB9A2
Cylance	unsafe
Sangfor	Trojan.Win32.Pynamer.V7c5
K7AntiVirus	Trojan ( 00565b1e1 )
Alibaba	Trojan:MSIL/Generic.2811bcbd
K7GW	Trojan ( 00565b1e1 )
BitDefenderTheta	Gen:NN.ZemsilF.36680.eq0@aeUvCnh
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of MSIL/HackTool.Crypter.ME
Cynet	Malicious (score: 99)
APEX	Malicious
NANO-Antivirus	Trojan.Win32.Crypter.extquv
Avast	Win32:Malware-gen
Tencent	Win32.Trojan.Agen.Itgl
F-Secure	Heuristic.HEUR/AGEN.1307940
Sophos	Troj/Mdrop-JPD
Ikarus	Trojan-Dropper.MSIL.Agent
Avira	HEUR/AGEN.1307940
Antiy-AVL	HackTool/MSIL.Crypter
Xcitium	TrojWare.MSIL.TrojanDropper.Hostwack.AKH@7k5fvc
Microsoft	Trojan:Win32/Pynamer.B!rfn
Google	Detected
VBA32	Trojan.MulDropNET
Malwarebytes	Generic.Malware/Suspicious
Panda	Trj/GdSda.A
Rising	Trojan.Pynamer!8.F0F8 (CLOUD)
SentinelOne	Static AI – Suspicious PE
Fortinet	MSIL/Crypter.ME!tr
AVG	Win32:Malware-gen
DeepInstinct	MALICIOUS

How to remove MSIL/HackTool.Crypter.ME?

MSIL/HackTool.Crypter.ME removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X