Categories: Ransom

Ransom:MSIL/HiddenTear.PB!MTB removal

The Ransom:MSIL/HiddenTear.PB!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Ransom:MSIL/HiddenTear.PB!MTB virus can do?

CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine Ransom:MSIL/HiddenTear.PB!MTB?


File Info:
name: EABB920F75C294311371.mlwpath: /opt/CAPEv2/storage/binaries/3d13bbe7750e38414ba19fd51fe8a253d791edb6a923af31fe5d56ae17af0eeccrc32: 2B98FB88md5: eabb920f75c2943113713849878a6dfbsha1: b9002e7de36af025d4cd6cafc5e75f4ddae4012asha256: 3d13bbe7750e38414ba19fd51fe8a253d791edb6a923af31fe5d56ae17af0eecsha512: 160e764c8147179f117dd1f36052cdaf81cbdfcd50a9355a2cf90010fda6cb8d812b048f36ca0238f666a3560ef5ec5634990c8f0b92ebc708b31e061d810cf9ssdeep: 12288:wz2p5bu9TlLfUTdwq1sCv5ScY4v9xjIQcx/wPlm4IxoHO:wKvbuhZUTdqPXixcLFwPlQctype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T115E4222D371C7A6AC2E5BDF3ED690A65A6B84703086D8F160D127E1DCB273C41EE4587sha3_384: 0ba26782f5db97fe34f0621c19badc872c57e6b08910673e3d012786b272e1f349d221d90817fadb4a8190ba008cc0b9ep_bytes: ff250020400000000000000000000000timestamp: 2043-04-16 10:16:45
Version Info:
Translation: 0x0000 0x04b0Comments: The Soviets Silver MonsterCompanyName: FileDescription: SovietSilverFileVersion: 1.0.0.3InternalName: SS Encrypter.exeLegalCopyright: Copyright ©  2021LegalTrademarks: OriginalFilename: SS Encrypter.exeProductName: SS EncrypterProductVersion: 1.0.0.3Assembly Version: 1.0.0.3

Ransom:MSIL/HiddenTear.PB!MTB also known as:

Lionic	Trojan.MSIL.Agent.j!c
DrWeb	Trojan.EncoderNET.31374
MicroWorld-eScan	IL:Trojan.MSILZilla.8091
FireEye	Generic.mg.eabb920f75c29431
CAT-QuickHeal	Trojan.YakbeexMSIL.ZZ4
ALYac	Trojan.Ransom.HiddenTear
Malwarebytes	Malware.AI.183339482
Zillya	Trojan.Filecoder.Win32.18019
Sangfor	Ransom.MSIL.Agent.gen
K7AntiVirus	Trojan ( 0057931d1 )
Alibaba	Ransom:MSIL/HiddenTear.64aaa529
K7GW	Trojan ( 0057931d1 )
Cybereason	malicious.f75c29
BitDefenderTheta	Gen:NN.ZemsilF.36196.Qm0@aG0oobe
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	MSIL/Filecoder.AGR
APEX	Malicious
ClamAV	Win.Ransomware.Msilzilla-9956233-0
Kaspersky	HEUR:Trojan-Ransom.Win32.Generic
BitDefender	IL:Trojan.MSILZilla.8091
Avast	Win32:MalwareX-gen [Trj]
Rising	Ransom.SSEncrypter!1.D3DE (CLASSIC)
Emsisoft	IL:Trojan.MSILZilla.8091 (B)
F-Secure	Heuristic.HEUR/AGEN.1352145
VIPRE	IL:Trojan.MSILZilla.8091
TrendMicro	Ransom_RAMSIL.SM
McAfee-GW-Edition	Ransomware-FTD!EABB920F75C2
Sophos	Mal/Generic-S
SentinelOne	Static AI – Malicious PE
GData	IL:Trojan.MSILZilla.8091
Jiangmin	Trojan.MSIL.wjyn
Google	Detected
Avira	HEUR/AGEN.1352145
Antiy-AVL	Trojan/MSIL.Filecoder
Xcitium	Malware@#22b5v29raqjua
Arcabit	IL:Trojan.MSILZilla.D1F9B
ZoneAlarm	HEUR:Trojan-Ransom.Win32.Generic
Microsoft	Ransom:MSIL/HiddenTear.PB!MTB
Cynet	Malicious (score: 99)
AhnLab-V3	Trojan/Win.Crypt.C4371497
McAfee	Ransomware-FTD!EABB920F75C2
MAX	malware (ai score=100)
VBA32	TScope.Trojan.MSIL
Cylance	unsafe
Panda	Trj/GdSda.A
TrendMicro-HouseCall	Ransom_RAMSIL.SM
Tencent	Win32.Trojan.Generic.Qgil
Yandex	Trojan.Filecoder!xVdbNXSqhXg
Ikarus	Trojan-Ransom.FileCrypter
MaxSecure	Trojan.Malware.73429809.susgen
Fortinet	MSIL/Filecoder.AGR!tr.ransom
AVG	Win32:MalwareX-gen [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)