Trojan

TrojanDownloader:MSIL/Nanocrypt!MTB information

Malware Removal

The TrojanDownloader:MSIL/Nanocrypt!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What TrojanDownloader:MSIL/Nanocrypt!MTB virus can do?

  • Dynamic (imported) function loading detected
  • Authenticode signature is invalid

How to determine TrojanDownloader:MSIL/Nanocrypt!MTB?



File Info:

name: 056D028FE83B55494921.mlw
path: /opt/CAPEv2/storage/binaries/d3e25cf3028b6f686b12af17a6b99e387528a4110fe7b41f48c44f560d98586c
crc32: 858B81D5
md5: 056d028fe83b554949216135ff9a1100
sha1: 493f8640960f04c303f58d8e0ffd45d1e1715aea
sha256: d3e25cf3028b6f686b12af17a6b99e387528a4110fe7b41f48c44f560d98586c
sha512: 0639ab26cc281234377fe663e7d028c11101359c29f30d7fd471f7dc5cb9e77008ab3212da4bc72b71053fc526e478a6c7a394a5ce48bbfcb31cb84de366100b
ssdeep: 768:tKDNuzkMbRl09r1cJITSMHkefxsbWqlybFb+t1F/xhL2GLU:tIYotjEeZsb3QbFb+PFrXU
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1BE33080137A74712C64C55B681E3053913F6E3872A73D78A3D98968E0F537DA9E8AF88
sha3_384: adb22ca8769be036b04ab196af690bef397bacfd16b4ebdecb6b80a406c0a21fd101ce15b54d60ae78ee0a42c21b212e
ep_bytes: ff250020400000000000000000000000
timestamp: 2020-11-18 22:01:32


Version Info:

Translation: 0x0000 0x04b0
FileDescription: testt
FileVersion: 1.0.0.0
InternalName: test.exe
LegalCopyright: Copyright ©  2020
OriginalFilename: test.exe
ProductName: aatest
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

TrojanDownloader:MSIL/Nanocrypt!MTB also known as:

LionicTrojan.Win32.Malicious.4!c
MicroWorld-eScanGen:Variant.Razy.836816
FireEyeGeneric.mg.056d028fe83b5549
McAfeeArtemis!056D028FE83B
VIPRETrojan.Win32.Generic!BT
SangforTrojan.MSIL.Nanocrypt.MTB
K7AntiVirusRiskware ( 0040eff71 )
AlibabaTrojanDownloader:MSIL/Nanocrypt.518878d9
K7GWRiskware ( 0040eff71 )
Cybereasonmalicious.fe83b5
CyrenW32/MSIL_Kryptik.DEB.gen!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
Paloaltogeneric.ml
KasperskyHEUR:Backdoor.MSIL.Bladabindi.gen
BitDefenderGen:Variant.Razy.836816
AvastWin32:Malware-gen
Ad-AwareGen:Variant.Razy.836816
SophosML/PE-A
BitDefenderThetaGen:NN.ZemsilF.34212.dm0@aeGFACk
ZillyaBackdoor.Bladabindi.Win32.22313
McAfee-GW-EditionArtemis!Trojan
EmsisoftGen:Variant.Razy.836816 (B)
SentinelOneStatic AI – Malicious PE
GDataGen:Variant.Razy.836816
AviraHEUR/AGEN.1235844
MAXmalware (ai score=86)
ZoneAlarmHEUR:Backdoor.MSIL.Bladabindi.gen
MicrosoftTrojanDownloader:MSIL/Nanocrypt!MTB
CynetMalicious (score: 100)
ALYacGen:Variant.Razy.836816
RisingTrojan.Generic/MSIL@AI.100 (RDM.MSIL:6i4RPBS57FCUFikMJU4O8Q)
IkarusTrojan-Downloader.MSIL.Nanocrypt
MaxSecureTrojan.Malware.73686729.susgen
FortinetW32/Bladabindi!tr.bdr
AVGWin32:Malware-gen
PandaTrj/GdSda.A
CrowdStrikewin/malicious_confidence_90% (W)

How to remove TrojanDownloader:MSIL/Nanocrypt!MTB?

TrojanDownloader:MSIL/Nanocrypt!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment