Categories: Malware

What is “MSILPerseus.228757”?

The MSILPerseus.228757 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MSILPerseus.228757 virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Authenticode signature is invalid
Network activity detected but not expressed in API logs

Related domains:

wpad.local-net

How to determine MSILPerseus.228757?


File Info:
name: 6F4CC27669441C810580.mlwpath: /opt/CAPEv2/storage/binaries/03801f7098bafe9ce1b1043820a4232dcbbd1a95898469b37cf58e5d561464d3crc32: 4FAC3F6Fmd5: 6f4cc27669441c8105801b9009920982sha1: 0d29a19e14016a7dc5d9e72b4a026d25a44a75d8sha256: 03801f7098bafe9ce1b1043820a4232dcbbd1a95898469b37cf58e5d561464d3sha512: e250bb41bf14c651a97e72b4fd9914e93431e631ea7e5a76242a12a4bd1fc9afdf94777d5a1e73b9892b5dc89a61944ee068ffdff0b3857b6ad7cd009b5a9d31ssdeep: 12288:XZJmli8c2Y4kjKSM34FFMlIQLy20iUbqKhKZbqAwo:JIi8c2YFjHO4ar0gbqAwotype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T132A45A18F7D95F01C1AD1A7EC1F8180CE3B6D8670B53E39F998515E82E24F9DD8A92C2sha3_384: 3d7e73bf1d10c0fd23953b2e2f8c7d473e968dd805e23834242d5e388aeaee3be914bd2aba732d5c89166abe5493e824ep_bytes: ff2500204000252d93ca000000000000timestamp: 2018-04-16 14:53:00
Version Info:
Translation: 0x0000 0x04b0Comments: CompanyName: WebMoney Transfer Ltd.FileDescription: WebMoneyFileVersion: 3.1.1.0InternalName: launcher4.exeLegalCopyright: Copyright 1998 WM Transfer Ltd.LegalTrademarks: OriginalFilename: launcher4.exeProductName: WebMoneyProductVersion: 3.1.1.0Assembly Version: 3.1.1.0

MSILPerseus.228757 also known as:

Lionic	Trojan.MSIL.Generic.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.MSILPerseus.228757
FireEye	Generic.mg.6f4cc27669441c81
ALYac	Gen:Variant.MSILPerseus.228757
Cylance	Unsafe
Sangfor	Trojan.MSIL.Generic.ky
CrowdStrike	win/malicious_confidence_90% (D)
Alibaba	Trojan:MSIL/MalwareX.40f73aaa
K7GW	Riskware ( 0050b1e11 )
K7AntiVirus	Riskware ( 0050b1e11 )
Cyren	W32/Trojan.BNH.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Riskware.GameHack.AA
APEX	Malicious
Paloalto	generic.ml
Cynet	Malicious (score: 99)
Kaspersky	HEUR:Trojan.MSIL.Generic
BitDefender	Gen:Variant.MSILPerseus.228757
NANO-Antivirus	Trojan.Win32.Razy.fanqbq
Avast	Win32:MalwareX-gen [Trj]
Ad-Aware	Gen:Variant.MSILPerseus.228757
Sophos	Mal/Generic-S
Comodo	Application.MSIL.GameHack.X@7kik7t
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.R002C0PKJ21
McAfee-GW-Edition	BehavesLike.Win32.Generic.gh
Emsisoft	Gen:Variant.MSILPerseus.228757 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.MSIL.iyyd
Avira	HEUR/AGEN.1128570
Antiy-AVL	Trojan/Generic.ASMalwS.25DD0EA
Microsoft	Trojan:Win32/Wacatac.B!ml
ViRobot	Trojan.Win32.Z.Razy.485607
GData	Gen:Variant.MSILPerseus.228757
AhnLab-V3	Unwanted/Win32.GameHack.R221944
Acronis	suspicious
McAfee	GenericRXCW-AC!6F4CC2766944
MAX	malware (ai score=99)
VBA32	TScope.Trojan.MSIL
Malwarebytes	Malware.AI.3635851226
TrendMicro-HouseCall	TROJ_GEN.R002C0PKJ21
Tencent	Malware.Win32.Gencirc.114cf062
Yandex	Trojan.Agent!FJ4LJ3uhG1Q
Ikarus	PUA.MSIL.Riskware
eGambit	Unsafe.AI_Score_99%
Fortinet	MSIL/Agent.SHR!tr
BitDefenderTheta	Gen:NN.ZemsilF.34294.Dm1@aanG2Je
AVG	Win32:MalwareX-gen [Trj]
Cybereason	malicious.669441
Panda	Trj/GdSda.A
MaxSecure	Trojan.Malware.300983.susgen