Categories: Malware

MSILPerseus.88786 (B) (file analysis)

The MSILPerseus.88786 (B) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What MSILPerseus.88786 (B) virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine MSILPerseus.88786 (B)?


File Info:
crc32: EA5E99D2md5: 93d1714b6083145b4b196e74c2bf9a9dname: 93D1714B6083145B4B196E74C2BF9A9D.mlwsha1: 8a35a01f431e4694a89d9d219f0187237eae0447sha256: 36d336d61c1f362c5d4d2ddf3ebc98478260a75b603ecfa4984e3b72c500febfsha512: 79675e87db0a5cccccd7004074f6f3ab4316770c0d16381025a278aa043a1e2768e2ed2dab8da8d13ff6a1e7d4cbc50c44117965d4eac75e8fe4a48527821cc4ssdeep: 3072:kG/MNFnFQ3S3n4NqJGPqUeKlPkhw76Fro+f4S1rF7tLJAZX:d/OngS3wpPleKahw7YF1ttKtype: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Version Info:
Translation: 0x0000 0x04b0LegalCopyright:  Assembly Version: 0.0.0.0InternalName: k.exeFileVersion: 0.0.0.0ProductVersion: 0.0.0.0FileDescription:  OriginalFilename: k.exe

MSILPerseus.88786 (B) also known as:

ALYac	Gen:Variant.MSILPerseus.88786
Cylance	Unsafe
Zillya	Worm.Bladabindi.Win32.15938
CrowdStrike	win/malicious_confidence_100% (D)
Alibaba	Backdoor:MSIL/Bladabindi.0d35f04d
K7GW	Trojan ( 004b99501 )
K7AntiVirus	Trojan ( 004b99501 )
Baidu	MSIL.Backdoor.Bladabindi.a
Cyren	W32/A-57056955!Eldorado
ESET-NOD32	a variant of MSIL/Bladabindi.AH
APEX	Malicious
Avast	Win32:Malware-gen
Cynet	Malicious (score: 99)
Kaspersky	HEUR:Trojan-Ransom.MSIL.Blocker.gen
NANO-Antivirus	Trojan.Win32.Ransom.fiueyi
MicroWorld-eScan	Gen:Variant.MSILPerseus.88786
Tencent	Win32.Trojan.Spy.Hupd
Sophos	Mal/Generic-S
Comodo	TrojWare.MSIL.Bladabindi.BGS@7lngf6
DrWeb	Trojan.MulDrop8.36862
VIPRE	Trojan.Win32.Generic!BT
FireEye	Generic.mg.93d1714b6083145b
Emsisoft	Gen:Variant.MSILPerseus.88786 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.MSIL.kjcx
Avira	TR/Spy.Gen8
eGambit	Unsafe.AI_Score_99%
Arcabit	Trojan.MSILPerseus.D15AD2
ZoneAlarm	HEUR:Trojan-Ransom.MSIL.Blocker.gen
Microsoft	Backdoor:MSIL/Bladabindi.BO
AhnLab-V3	Trojan/Win32.Bladabindi.C1930977
McAfee	Artemis!93D1714B6083
VBA32	TScope.Trojan.MSIL
Malwarebytes	Backdoor.NJRat
Panda	Trj/GdSda.A
Ikarus	Worm.MSIL.Bladabindi
Fortinet	MSIL/Generic.AP.81D6677C!tr
AVG	Win32:Malware-gen
Paloalto	generic.ml
Qihoo-360	Generic/Backdoor.NjRAT.HwMAEpsA