Categories: Ransom

What is “Ransom:MSIL/HiddenTear.RDA!MTB”?

The Ransom:MSIL/HiddenTear.RDA!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Ransom:MSIL/HiddenTear.RDA!MTB virus can do?

Authenticode signature is invalid
Anomalous .NET characteristics
CAPE detected the HakunaMatata malware family

How to determine Ransom:MSIL/HiddenTear.RDA!MTB?


File Info:
name: FFAD79BE795E34601D36.mlwpath: /opt/CAPEv2/storage/binaries/fbf33392563582553a8f9a4bc8b47d503dc7a27c69c00aea2c5eba33474b9be6crc32: 84C3B559md5: ffad79be795e34601d3676e62f50557esha1: 9514e808c047bce7e8f1f4dbb399ad8ca71e4043sha256: fbf33392563582553a8f9a4bc8b47d503dc7a27c69c00aea2c5eba33474b9be6sha512: eaf9fc0ba13b88fa8472379663e35d7dd108af24fa77f4a980ceb926be523cf90c2f6cdfc06992121daf92ed71c23d1ba431a5ecc6554b7dc0e62ebfb5a5b63fssdeep: 384:blhPJDRDQJno/Mbm812DuE7ZhAcYgxYaI/ivdIvrN:5hPJDRDQJnoMm8122gxcMdYNtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1E7B2A64837FD5739F1BB2F7868F151915778B972DD2AD6CE098C10490862B8CCAE076Esha3_384: ed367f09c086e55f92dadecd431b327473f1c747bcc828333a5ef990210613a63e8c9383ea88f621becea65004cd884bep_bytes: ff250020400000000000000000000000timestamp: 2023-08-21 09:24:19
Version Info:
Translation: 0x0000 0x04b0FileDescription:  FileVersion: 0.0.0.0InternalName: locker.exeLegalCopyright:  OriginalFilename: locker.exeProductVersion: 0.0.0.0Assembly Version: 0.0.0.0

Ransom:MSIL/HiddenTear.RDA!MTB also known as:

Bkav	W32.Common.8D325424
Lionic	Trojan.Win32.Encoder.U!c
MicroWorld-eScan	Trojan.GenericKD.69123802
FireEye	Generic.mg.ffad79be795e3460
McAfee	Artemis!FFAD79BE795E
Malwarebytes	Malware.AI.3370777841
Zillya	Trojan.Filecoder.Win32.30679
Sangfor	Ransom.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Ransom:MSIL/Encoder.1254dca9
K7GW	Ransomware ( 005a8b921 )
K7AntiVirus	Ransomware ( 005a8b921 )
Cyren	W32/ABRansom.PHFV-6411
Symantec	Ransom.Gen
Elastic	malicious (high confidence)
ESET-NOD32	a variant of MSIL/Filecoder.Chaos.B
APEX	Malicious
Kaspersky	HEUR:Trojan-Ransom.Win32.Generic
BitDefender	Trojan.GenericKD.69123802
NANO-Antivirus	Trojan.Win32.Ransom.jzaunh
Avast	Win32:RansomX-gen [Ransom]
Sophos	Troj/Ransom-GXU
F-Secure	Trojan.TR/Ransom.tdliy
DrWeb	Trojan.Encoder.37660
VIPRE	Trojan.GenericKD.69123802
TrendMicro	Ransom.MSIL.HAKUNAMATATA.SMWFB
McAfee-GW-Edition	BehavesLike.Win32.Ransomware.mm
Trapmine	malicious.moderate.ml.score
Emsisoft	Trojan.GenericKD.69123802 (B)
Ikarus	Trojan-Ransom.FileCrypter
GData	Trojan.GenericKD.69123802
Google	Detected
Avira	TR/Ransom.tdliy
Kingsoft	MSIL.Trojan-Ransom.Encoder.gen
Xcitium	Malware@#22kuuyxxjw2wu
Arcabit	Trojan.Generic.D41EBEDA
ViRobot	Trojan.Win.Z.Ransom.25088
ZoneAlarm	HEUR:Trojan-Ransom.Win32.Generic
Microsoft	Ransom:MSIL/HiddenTear.RDA!MTB
Cynet	Malicious (score: 100)
AhnLab-V3	Malware/Win.Generic.C5450774
ALYac	Trojan.Ransom.Filecoder
MAX	malware (ai score=85)
Cylance	unsafe
Panda	Trj/Chgt.AD
Rising	Ransom.HakunaMatata!1.E7BF (CLASSIC)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.73702460.susgen
Fortinet	MSIL/Filecoder.APU!tr.ransom
BitDefenderTheta	Gen:NN.ZemsilF.36722.bm0@a4DyA!
AVG	Win32:RansomX-gen [Ransom]
Cybereason	malicious.8c047b
DeepInstinct	MALICIOUS