MSIL/Hoax.FakeHack.BOC (file analysis)

The MSIL/Hoax.FakeHack.BOC is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What MSIL/Hoax.FakeHack.BOC virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine MSIL/Hoax.FakeHack.BOC?


File Info:
name: 964F71C916325A05E535.mlw
path: /opt/CAPEv2/storage/binaries/133bc582c984ae9cb527c809bfd2bea324f5e18b57e1a53448d1249777752d9d
crc32: D1AB6E84
md5: 964f71c916325a05e535208ae0628902
sha1: 5103c583df33fcee5b4b7bc1825ad38ba982a64c
sha256: 133bc582c984ae9cb527c809bfd2bea324f5e18b57e1a53448d1249777752d9d
sha512: 6ee46f0e69492ac670b20939a1e672e069a2f777776c394ab252bfc9f5225c60de5f0ee20ce42e2c2ac4f369a49e24f76b173a534dd654a3d17166e10a4df671
ssdeep: 384:QmqRrRbyB0m6MlLXglRzZ63mGfLNt3QBfQH8zxJrppT:QEPmYH8tRppT
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D352D91D37FC9F62CA7953F505A7113003B6BA4660E0DEBCACE560CA5962F400A52F6F
sha3_384: 04fde3757f19da71c2b776491e3ed68640e38b562387fd79421de06b5cc22943830d27d3947103f0cb48ece061564d4f
ep_bytes: ff250020400000000000000000000000
timestamp: 2086-04-15 17:30:18

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: Havoc
FileVersion: 1.0.0.0
InternalName: Havoc.exe
LegalCopyright: Copyright ©  2021
LegalTrademarks: 
OriginalFilename: Havoc.exe
ProductName: Havoc
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

MSIL/Hoax.FakeHack.BOC also known as:

Lionic	Trojan.Win32.FakeHack.4!c
Skyhigh	Artemis!Trojan
McAfee	Artemis!964F71C91632
Cylance	unsafe
Zillya	Tool.FakeHack.Win32.2275
Sangfor	Joke.Msil.Fakehack.Vjbj
Alibaba	Hoax:MSIL/FakeHack.963efe2b
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Hoax.FakeHack.BOC
APEX	Malicious
Avast	Win32:Malware-gen
Sophos	Generic Reputation PUA (PUA)
Webroot	W32.Trojan.Gen
Antiy-AVL	HackTool[Hoax]/MSIL.FakeHack
Microsoft	Program:Win32/Wacapew.C!ml
AhnLab-V3	Malware/Win32.RL_Generic.C4354414
Malwarebytes	Generic.Malware/Suspicious
Panda	Trj/GdSda.A
Rising	Malware.Ymacco!8.11C01 (CLOUD)
Yandex	Hoax.FakeHack!RnG9VSMllSM
MaxSecure	Trojan.Malware.7164915.susgen
Fortinet	Riskware/FakeHack
AVG	Win32:Malware-gen
DeepInstinct	MALICIOUS

How to remove MSIL/Hoax.FakeHack.BOC?

MSIL/Hoax.FakeHack.BOC removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X