About “Trojan-Spy.MSIL.SnakeLogger” infection

The Trojan-Spy.MSIL.SnakeLogger is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan-Spy.MSIL.SnakeLogger virus can do?

Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Binary compilation timestomping detected

How to determine Trojan-Spy.MSIL.SnakeLogger?


File Info:
name: 8A3F5F53275AE05D4584.mlw
path: /opt/CAPEv2/storage/binaries/faa6e62306368be4b80693b9123f8867b8cd7b194377200579100c2810f3bf5a
crc32: 2284C03F
md5: 8a3f5f53275ae05d45841cf702addbe1
sha1: 8e5700da3fcab39961f4a7731f8ea6e0952be365
sha256: faa6e62306368be4b80693b9123f8867b8cd7b194377200579100c2810f3bf5a
sha512: 1becac332f04f80ec634536a76f0bd5ecba42c743b2f240440d6f38c2c2080c483b3318221e204525727272eb743e4068db274928c1bb9c624a3168d71907b49
ssdeep: 12288:cCM831hEwg32Xjlfa8NPrlc7bkilUHJ9XJZIut/jPOV5WFl9ZG4:gQEVGXhLNPSI5ZISb2VUlrG4
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T188D4E00076BC9F62D5BD87FD2975558113F6261F622EE34A0EC2B8DF2A76F410A50E0B
sha3_384: 2aabb09a079ff3d58b20beddd01ac81acf0343bbaaddfbe9bb893d5f5526bdec6a6d8685e9cda3625586691c14eb7f7c
ep_bytes: ff250020400000000000010000000200
timestamp: 2087-06-18 12:46:08

Version Info:
Translation: 0x0000 0x04b0
Comments: Card Puncher
CompanyName: Landskip Yard Care
FileDescription: Infusion
FileVersion: 1.2.0.0
InternalName: TargetInvocationExcept.exe
LegalCopyright: Landskip Yard Care ©  2021
LegalTrademarks: 
OriginalFilename: TargetInvocationExcept.exe
ProductName: Infusion
ProductVersion: 1.2.0.0
Assembly Version: 1.2.0.0

Trojan-Spy.MSIL.SnakeLogger also known as:

Bkav	W32.AIDetectNet.01
Elastic	malicious (high confidence)
FireEye	Generic.mg.8a3f5f53275ae05d
Cyren	W32/Variadic.A.gen!Eldorado
Symantec	Scr.Malcode!gdn34
tehtris	Generic.Malware
ESET-NOD32	a variant of MSIL/GenKryptik_AGen.GP
APEX	Malicious
Paloalto	generic.ml
Kaspersky	HEUR:Trojan-Spy.MSIL.SnakeLogger.gen
Avast	Win32:PWSX-gen [Trj]
Sophos	ML/PE-A
SentinelOne	Static AI – Malicious PE
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
GData	IL:Trojan.MSILZilla.22121
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.MSILKrypt.R505789
Rising	Malware.Obfus/MSIL@AI.96 (RDM.MSIL:18MVFZH0Ev1i+Pqw4rL0vA)
Ikarus	Win32.Outbreak
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Variadic.A!tr
AVG	Win32:PWSX-gen [Trj]

How to remove Trojan-Spy.MSIL.SnakeLogger?

Trojan-Spy.MSIL.SnakeLogger removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X