Categories: Trojan

TrojanDownloader:O97M/Obfuse.PM!MTB information

The TrojanDownloader:O97M/Obfuse.PM!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanDownloader:O97M/Obfuse.PM!MTB virus can do?

Injection (inter-process)
Injection with CreateRemoteThread in a remote process
Uses Windows utilities for basic functionality
Network activity detected but not expressed in API logs
Harvests information related to installed mail clients

How to determine TrojanDownloader:O97M/Obfuse.PM!MTB?


File Info:
crc32: AB771618md5: 48eab7b9a8b212f291e5a43e9a65d3e1name: upload_filesha1: 379deed8a3d207e930fc3afbf205aee17c19076asha256: 316b9d8008691eff15ff130c72920a8406718a1350fd39bb401ed3d23dd881f3sha512: 1afd92a5eeb9616c02d02b9e6b72fa5eb6b93d0f3a8a21c519765f866e30a5031fb105bf06ec985d56124251df33cd44ad079ac745eb444a9a14b565904c4e90ssdeep: 3072:F/oklspDTua83ZJh1rFDmh6idhTy3xAaf9BEJ:LJbrFd6hTy3xAaMtype: Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, Code page: 1252, Title: cure, Author: cure Presentation, Last Saved By: Master Mana, Revision Number: 1, Name of Creating Application: Microsoft Office PowerPoint, Total Editing Time: 03:09, Create Time/Date: Sun Nov  1 23:20:18 2020, Last Saved Time/Date: Sun Nov  1 23:23:27 2020, Number of Words: 0
Version Info:
0: [No Data]

TrojanDownloader:O97M/Obfuse.PM!MTB also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.35050705
FireEye	Trojan.GenericKD.35050705
McAfee	RDN/Generic.rp
VIPRE	LooksLike.Macro.Malware.d (v)
AegisLab	Trojan.MSOffice.SLoad.a!c
TrendMicro	Trojan.P97M.WOREFLINT.AA
Cyren	Trojan.IVWW-1
Symantec	W97M.Downloader
ESET-NOD32	a variant of Generik.EKQUMXJ
TrendMicro-HouseCall	Trojan.P97M.WOREFLINT.AA
Avast	Other:Malware-gen [Trj]
Kaspersky	HEUR:Trojan-Downloader.MSOffice.SLoad.gen
BitDefender	Trojan.GenericKD.35050705
ViRobot	PPT.Z.Agent.256512
Tencent	Heur.Macro.Generic.h.7efeb4d9
Ad-Aware	Trojan.GenericKD.35050705
Emsisoft	Trojan.GenericKD.35050705 (B)
F-Secure	Malware.W97M/Dldr.Sload.xmaxl
Invincea	Troj/DocDl-ABDK
McAfee-GW-Edition	BehavesLike.OLE2.Downloader.dr
Sophos	Troj/DocDl-ABDK
Ikarus	Trojan.VBA.Agent
Avira	W97M/Dldr.Sload.xmaxl
Antiy-AVL	Trojan[Downloader]/MSOffice.Agent.hma
Microsoft	TrojanDownloader:O97M/Obfuse.PM!MTB
Gridinsoft	Trojan.U.Downloader.oa
Arcabit	Trojan.Generic.D216D4D1
ZoneAlarm	HEUR:Trojan-Downloader.MSOffice.SLoad.gen
GData	Trojan.GenericKD.35050705
Cynet	Malicious (score: 85)
ALYac	Trojan.Downloader.PPT.Agent
Zoner	Probably Heur.W97Obfuscated
Rising	Malware.ObfusVBA@ML.100 (VBA)
SentinelOne	DFI – Malicious OLE
Fortinet	VBA/Agent.HMAOBGZ!tr
AVG	Other:Malware-gen [Trj]
Qihoo-360	Generic/Trojan.Downloader.3f4