Categories: Trojan

About “MSIL/TrojanDropper.Agent.FIN” infection

The MSIL/TrojanDropper.Agent.FIN is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MSIL/TrojanDropper.Agent.FIN virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine MSIL/TrojanDropper.Agent.FIN?


File Info:
name: 511551493B1B2C221EC6.mlwpath: /opt/CAPEv2/storage/binaries/233a77f6635f552e6e7d096ea90bee251235badae09072e1f380cfb760f05149crc32: 51E11A35md5: 511551493b1b2c221ec6a7b2796d8c1csha1: 0aa968efd5dd9d526cc5fb7960c3111d37cd9259sha256: 233a77f6635f552e6e7d096ea90bee251235badae09072e1f380cfb760f05149sha512: 52233d8fb86bd25d92ceae1a73405a0ee498eb28d3b65d267dda6fc69b1b81818326c049addffc0ba37fb095ee9a5f18abbd368443b52c1ee9b420e91a649cc0ssdeep: 49152:dspK+RZPojC5FkmYkt5bYH6QXoqHEgZyspK+RZPojC5FkmYkt5bYH6QXoqHEgZKC:dd+Rlo+nkOt5bI6QYUEgZyd+Rlo+nkOOtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T182A51202EE54462BC85D4A72E8B7852E1B31BF6A6CC1DF9931086DAE7FB2341CD416CDsha3_384: 7fc79d49b9bea5565c46be181919a6fb15037d1e2cf4f284a94b18a93a72f31ce4ff9faf88f14197ad1e344ed2fe897cep_bytes: ff250020400000000000000000000000timestamp: 2085-05-06 22:46:38
Version Info:
Translation: 0x0000 0x04b0Comments: CompanyName: FileDescription: NotRansom_CryptoLock_DropperFileVersion: 1.0.0.0InternalName: NotRansom_CryptoLock_Dropper.exeLegalCopyright: Copyright ©  2021LegalTrademarks: OriginalFilename: NotRansom_CryptoLock_Dropper.exeProductName: NotRansom_CryptoLock_DropperProductVersion: 1.0.0.0Assembly Version: 1.0.0.0

MSIL/TrojanDropper.Agent.FIN also known as:

Lionic	Trojan.MSIL.Stealer.i!c
Cynet	Malicious (score: 99)
McAfee	GenericRXRA-GQ!511551493B1B
Malwarebytes	Ransom.FileCryptor
Sangfor	Riskware.Win32.Agent.ky
K7AntiVirus	Trojan ( 0058b7501 )
Alibaba	Ransom:MSIL/CryptoLocker.8d20c5ec
K7GW	Trojan ( 0058b7501 )
CrowdStrike	win/malicious_confidence_60% (W)
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/TrojanDropper.Agent.FIN
APEX	Malicious
Paloalto	generic.ml
Kaspersky	UDS:DangerousObject.Multi.Generic
BitDefender	Trojan.GenericKD.38193606
MicroWorld-eScan	Trojan.GenericKD.38193606
Avast	Win32:PWSX-gen [Trj]
Tencent	Msil.Trojan-qqpass.Qqrob.Srmz
Ad-Aware	Trojan.GenericKD.38193606
Sophos	Mal/Generic-S
DrWeb	Trojan.PWS.Siggen3.7811
Zillya	Dropper.Agent.Win32.467584
TrendMicro	Ransom_CryptoLocker.R002C0DL521
McAfee-GW-Edition	GenericRXRA-GQ!511551493B1B
FireEye	Trojan.GenericKD.38193606
Emsisoft	Trojan.GenericKD.38193606 (B)
Ikarus	Ransom.MSIL.Cryptolocker
GData	MSIL.Trojan.BSE.1X9HJIJ
Jiangmin	Trojan.PSW.MSIL.cyqu
Avira	HEUR/AGEN.1129952
Gridinsoft	Ransom.Win32.Sabsik.sa
Arcabit	Trojan.Generic.D246C9C6
Microsoft	Ransom:MSIL/CryptoLocker.DD!MTB
AhnLab-V3	Ransomware/Win.CryptoLocker.C4817714
VBA32	TScope.Trojan.MSIL
ALYac	Trojan.GenericKD.38193606
MAX	malware (ai score=85)
Cylance	Unsafe
TrendMicro-HouseCall	Ransom_CryptoLocker.R002C0DL521
Yandex	Trojan.DR.Agent!bNMocSfvmik
SentinelOne	Static AI – Suspicious PE
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Agent.FIN!tr.ransom
BitDefenderTheta	Gen:NN.ZemsilF.34084.jo0@ayHkvlf
AVG	Win32:PWSX-gen [Trj]
Cybereason	malicious.fd5dd9
Panda	Trj/GdSda.A