Categories: Trojan

Trojan-PSW.MSIL.Reline.dlu (file analysis)

The Trojan-PSW.MSIL.Reline.dlu is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan-PSW.MSIL.Reline.dlu virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Dynamic (imported) function loading detected
Reads data out of its own binary image
CAPE extracted potentially suspicious content
Drops a binary and executes it
Unconventionial language used in binary resources: Russian
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Created a process from a suspicious location

How to determine Trojan-PSW.MSIL.Reline.dlu?


File Info:
name: 042118FEE0E88181C80A.mlwpath: /opt/CAPEv2/storage/binaries/260bf7ba71ad9a456d9d74a2843e4f0b4611ff5f3609b5ef25b23fe1f723695ccrc32: 48C3133Bmd5: 042118fee0e88181c80a253166b723dfsha1: a760fef79c42ec54479f385bb383dc979dd57008sha256: 260bf7ba71ad9a456d9d74a2843e4f0b4611ff5f3609b5ef25b23fe1f723695csha512: 49caba2c204374cb2b91037a07b041ccf47c3969d4a9b65ec9f2286cc62d6f3f3277bcea4cd14474893aef2f0877ad030e081812fc283c67bd3ee5d4333bec27ssdeep: 12288:VNpszYhvXWSVJdMaeaxxJdnYet6I1N2rwm:rhvJVJdMQhYwp1krwmtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1A594E002FDC588B2C67119315A29BB91657DB9200F14CEDFA3D84E5DAA341E0FB31BA7sha3_384: 6bf5f91ec4f6073a25102533e570a9845430b77aafd6a8681314a87882ad798bb76794bbc7429cbc0b6dccfea2247895ep_bytes: e8a4040000e988feffff3b0d68e64300timestamp: 2021-04-07 14:39:21
Version Info:
0: [No Data]

Trojan-PSW.MSIL.Reline.dlu also known as:

Bkav	W32.AIDetect.malware2
Lionic	Trojan.MSIL.Reline.i!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.37216135
FireEye	Generic.mg.042118fee0e88181
McAfee	RDN/Generic PWS.y
Cylance	Unsafe
Sangfor	Infostealer.MSIL.Reline.dlu
K7AntiVirus	Trojan ( 0057ee121 )
Alibaba	TrojanPSW:MSIL/Reline.38bd462c
K7GW	Trojan ( 0057ee121 )
CrowdStrike	win/malicious_confidence_100% (W)
BitDefenderTheta	Gen:NN.ZemsilF.34182.tiW@aqSmlao
Cyren	W32/Trojan.ERII-1170
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of MSIL/GenKryptik.FHCU
TrendMicro-HouseCall	TROJ_GEN.R002C0PAS22
Avast	Win32:Trojan-gen
ClamAV	Win.Packed.Dorifel-9892630-0
Kaspersky	Trojan-PSW.MSIL.Reline.dlu
BitDefender	Trojan.GenericKD.37216135
NANO-Antivirus	Trojan.Win32.Reline.ixiwmq
Tencent	Msil.Trojan-qqpass.Qqrob.Chd
Sophos	Mal/Generic-S
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.R002C0PAS22
McAfee-GW-Edition	BehavesLike.Win32.Generic.gc
Emsisoft	Trojan.GenericKD.37216135 (B)
Paloalto	generic.ml
Avira	TR/ATRAPS.Gen
Antiy-AVL	Trojan/Generic.ASMalwS.3424D5B
Microsoft	Backdoor:Win32/Bladabindi!ml
ViRobot	Trojan.Win32.Z.Reline.436891
ZoneAlarm	Trojan-PSW.MSIL.Reline.dlu
GData	Trojan.GenericKD.37216135
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.Generic.R421303
VBA32	TrojanPSW.MSIL.Reline
ALYac	Trojan.GenericKD.37216135
MAX	malware (ai score=89)
Malwarebytes	Trojan.Dropper.SFX
APEX	Malicious
Rising	Trojan.Generic/MSIL@AI.100 (RDM.MSIL:I+OUp8Fth5LeDbbEk3LGQg)
Yandex	Trojan.GenKryptik!3wba3/LS5TU
SentinelOne	Static AI – Malicious SFX
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/GenKryptik.FHCU!tr
AVG	Win32:Trojan-gen
Panda	Trj/Genetic.gen