Trojan.VBCrypt.MF.5920 (file analysis)

The Trojan.VBCrypt.MF.5920 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan.VBCrypt.MF.5920 virus can do?

Executable code extraction
Unconventionial language used in binary resources: Spanish (Modern)
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Trojan.VBCrypt.MF.5920?


File Info:
crc32: 3D181CEA
md5: a7a7ff8c596f5a5e08dd628ab8ef4125
name: A7A7FF8C596F5A5E08DD628AB8EF4125.mlw
sha1: a0bc570f477a5b1a02d20a509dd95bfd5770cb9e
sha256: a8bb7727adb4d36b103f6b560d10d13506d625c9f4dbf32a6e388657b2bcbfdd
sha512: a56abc9af93a2d4b0fbf9f0b7d24deee81f0eae922d8c99892f92ebfe0e989e2c5974ceaaeb2dc33d01a7dcb72c5e63ed3af24244fa8cd928afbec9bdf1b5450
ssdeep: 192:FR0iJab5cMwpS+r44+PsPUb/+OQ+Wejs:b4b+pSI+Psmugjs
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0c0a 0x04b0
InternalName: stub
FileVersion: 1.00
CompanyName: server
ProductName: stub
ProductVersion: 1.00
OriginalFilename: stub.exe

Trojan.VBCrypt.MF.5920 also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Trojan ( 002a405c1 )
Elastic	malicious (high confidence)
DrWeb	Win32.HLLW.SpyNet.449
Cynet	Malicious (score: 100)
CAT-QuickHeal	Trojan.VBCrypt.MF.5920
ALYac	Gen:Trojan.Heur.VP.bm0@aCf5JSG
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_90% (W)
Alibaba	Trojan:Win32/VBInject.abac734c
K7GW	Trojan ( 002a405c1 )
Cybereason	malicious.c596f5
Cyren	W32/VBInject.CC.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Injector.APV
APEX	Malicious
Avast	Win32:GenMalicious-KKX [Trj]
Kaspersky	Trojan.Win32.Agent.voex
BitDefender	Gen:Trojan.Heur.VP.bm0@aCf5JSG
NANO-Antivirus	Trojan.Win32.WBNA.fjhgoz
ViRobot	Trojan.Win32.PSWLdPinch.462848
MicroWorld-eScan	Gen:Trojan.Heur.VP.bm0@aCf5JSG
Tencent	Win32.Trojan.Agent.Lnxv
Ad-Aware	Gen:Trojan.Heur.VP.bm0@aCf5JSG
Sophos	ML/PE-A + Mal/VB-FD
Comodo	Backdoor.Win32.Poison.~FFG@1x8tus
BitDefenderTheta	AI:Packer.4F8BF6B11E
VIPRE	VirTool.Win32.VBInject.gen.bp (v)
TrendMicro	Mal_VBInj1
McAfee-GW-Edition	BackDoor-DZP.b
FireEye	Generic.mg.a7a7ff8c596f5a5e
Emsisoft	Gen:Trojan.Heur.VP.bm0@aCf5JSG (B)
SentinelOne	Static AI – Suspicious PE
Jiangmin	Worm/VBNA.gysl
Avira	TR/Dropper.Gen
eGambit	Unsafe.AI_Score_92%
Microsoft	VirTool:Win32/VBInject.RT
GData	Gen:Trojan.Heur.VP.bm0@aCf5JSG
AhnLab-V3	Trojan/Win32.Poison.R12492
McAfee	BackDoor-DZP.b
MAX	malware (ai score=83)
VBA32	Malware-Cryptor.VB.gen.1
TrendMicro-HouseCall	Mal_VBInj1
Rising	Dropper.Generic!8.35E (CLOUD)
Ikarus	VirTool.Win32.Vbinder
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/VBInjector.fam!tr
AVG	Win32:GenMalicious-KKX [Trj]
Paloalto	generic.ml

How to remove Trojan.VBCrypt.MF.5920?

Trojan.VBCrypt.MF.5920 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X