Categories: Trojan

TrojanDownloader:O97M/Obfuse.SS!MTB malicious file

The TrojanDownloader:O97M/Obfuse.SS!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanDownloader:O97M/Obfuse.SS!MTB virus can do?

The office file has a unconventional code page: ANSI Cyrillic; Cyrillic (Windows)
The office file contains 2 macros
The office file contains a macro with auto execution
The office file contains anomalous features
The office file contains a macro with potential indicators of compromise
The office file contains a macro with suspicious strings

Related domains:

z.whorecord.xyz

How to determine TrojanDownloader:O97M/Obfuse.SS!MTB?


File Info:
crc32: FD917F85md5: b371470dc7bd04733cc9d2e84d211fabname: upload_filesha1: 556deb86aca1de1e40434ed606b501ae90d1a425sha256: 820acc712ea6e23eefe48aad2d0241140c455a98a47737a033ab3699a26f54besha512: 6eba7780c5faa1ea69c647e416b581a609e66384ebc31f284c80b269f9b4fcd84e154d5de1202d78e9927278cfdba78004ad7da61210e39c765f8f9cec00dec4ssdeep: 6144:52odBqalWx9HKA2zvr4v6Bvr7x+LqRidIc5eiosO+E2mjyDxcBne3OOUj3uZgFt:5pKqTDr4sx+G3c5eH+LRDx4jeZntype: Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, Code page: 1251, Author: 1, Template: Normal.dotm, Last Saved By: 1, Revision Number: 55, Name of Creating Application: Microsoft Office Word, Total Editing Time: 49:00, Create Time/Date: Tue Oct 20 11:27:00 2020, Last Saved Time/Date: Tue Oct 20 14:55:00 2020, Number of Pages: 1, Number of Words: 70463, Number of Characters: 401644, Security: 0
Version Info:
0: [No Data]

TrojanDownloader:O97M/Obfuse.SS!MTB also known as:

MicroWorld-eScan	Trojan.GenericKD.34860553
FireEye	Trojan.GenericKD.34860553
ALYac	Trojan.Downloader.DOC.Gen
Symantec	W97M.Downloader
Avast	SNH:Script [Dropper]
Kaspersky	HEUR:Trojan-Dropper.MSOffice.SDrop.gen
BitDefender	Trojan.GenericKD.34860553
Rising	Dropper.Agent!8.2F (TOPIS:E0:7NbfRdFivCN)
Ad-Aware	Trojan.GenericKD.34860553
DrWeb	Exploit.Siggen2.52969
McAfee-GW-Edition	BehavesLike.OLE2.Downloader.jg
Avira	W97M/Agent.6557911
Microsoft	TrojanDownloader:O97M/Obfuse.SS!MTB
Arcabit	Trojan.Generic.D213EE09
ZoneAlarm	HEUR:Trojan-Dropper.MSOffice.SDrop.gen
GData	Trojan.GenericKD.34860553
McAfee	W97M/Dropper.gz
TACHYON	Suspicious/W97M.Obfus.Gen.8
Zoner	Probably Heur.W97Obfuscated
ESET-NOD32	a variant of Generik.ECCMCZC
Ikarus	Trojan-Dropper.VBA.Agent
Fortinet	VBA/Agent.5A0B!tr
AVG	SNH:Script [Dropper]
Qihoo-360	Generic/Trojan.Dropper.be6