Categories: Trojan

Trojan:MSIL/AgentTesla.KAAO!MTB malicious file

The Trojan:MSIL/AgentTesla.KAAO!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:MSIL/AgentTesla.KAAO!MTB virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid

How to determine Trojan:MSIL/AgentTesla.KAAO!MTB?


File Info:
name: F2E349D86B057BA53A1B.mlwpath: /opt/CAPEv2/storage/binaries/207bfbe64871f4b4140f97ed5c877283469a344339d96a909c99f5067ecf0aaccrc32: CF0AC45Fmd5: f2e349d86b057ba53a1b8e7dcc595ac5sha1: 578603ffc80014db69bbc9328fec0c231c4ec81asha256: 207bfbe64871f4b4140f97ed5c877283469a344339d96a909c99f5067ecf0aacsha512: af7aac607fc5abd8938baabeccd59cec85db516b663f319144336b49d70ad282005d325ac447e9ed40615ca52b4bde033b8de1562de6bbdac6bcdc922afa5590ssdeep: 384:mpfOEQv+iA8Cnepmwww6BKpwWowwwlpESUJXtdhVm13jWtSHPWcAwaYi:CncRpESUJXtdhVm13jWtSHPWcFaYitype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1E004C952EBB6EF30CE340A3FC245B3255F2E5E9181F27D8E304DB1652EB9D01D5446AAsha3_384: fc4e334c22cf917cc4c827dea62d62ebf42c4c8afb59f8e530da27a50422963582d88a51227862acb70e43e0353013cbep_bytes: ff25d43040000000000000000000a830timestamp: 2023-08-22 03:47:25
Version Info:
Translation: 0x0000 0x04b0Comments: CompanyName: FileDescription: FileVersion: 1.0.0.0InternalName: Zyuyaai.exeLegalCopyright: LegalTrademarks: OriginalFilename: Zyuyaai.exeProductName: ProductVersion: 1.0.0.0Assembly Version: 1.0.0.0

Trojan:MSIL/AgentTesla.KAAO!MTB also known as:

Lionic	Trojan.Win32.Seraph.j!c
MicroWorld-eScan	IL:Trojan.MSILZilla.31217
Skyhigh	RDN/Generic Downloader.x
ALYac	IL:Trojan.MSILZilla.28764
Malwarebytes	Trojan.MalPack.MSIL.Generic
VIPRE	IL:Trojan.MSILZilla.28764
Sangfor	Downloader.Msil.Agent.Vi7q
K7AntiVirus	Trojan-Downloader ( 005aa3481 )
BitDefender	IL:Trojan.MSILZilla.31217
K7GW	Trojan-Downloader ( 005aa3481 )
CrowdStrike	win/malicious_confidence_100% (W)
BitDefenderTheta	Gen:NN.ZemsilF.36792.km0@aemaMhh
VirIT	Trojan.Win32.DownLoader19.VVA
Symantec	Trojan.Gen.MBT
Elastic	malicious (high confidence)
ESET-NOD32	a variant of MSIL/TrojanDownloader.Agent.POM
Cynet	Malicious (score: 100)
APEX	Malicious
Kaspersky	HEUR:Trojan-Ransom.Win32.Blocker.pef
Alibaba	TrojanDownloader:MSIL/Seraph.683c4315
NANO-Antivirus	Trojan.Win32.Blocker.kdcdbw
ViRobot	Trojan.Win.Z.Lazy.173056
Sophos	Mal/Generic-S
F-Secure	Trojan.TR/Dldr.Agent.mbbcv
DrWeb	Trojan.DownLoader46.714
Zillya	Downloader.Seraph.Win32.4354
TrendMicro	Trojan.MSIL.SERAPH.USPAXHP23
FireEye	Generic.mg.f2e349d86b057ba5
Emsisoft	IL:Trojan.MSILZilla.31217 (B)
Ikarus	Trojan-Downloader.MSIL.Agent
GData	IL:Trojan.MSILZilla.31217
Webroot	W32.Trojan.MSIL.Seraph
Varist	W32/MSIL_Kryptik.DBS.gen!Eldorado
Avira	TR/Dldr.Agent.mbbcv
Antiy-AVL	Trojan[Ransom]/Win32.Blocker
Kingsoft	Win32.Trojan-Ransom.Blocker.pef
Arcabit	IL:Trojan.MSILZilla.D79F1
ZoneAlarm	HEUR:Trojan-Ransom.Win32.Blocker.pef
Microsoft	Trojan:MSIL/AgentTesla.KAAO!MTB
Google	Detected
AhnLab-V3	Malware/Win.Generic.C5474856
McAfee	RDN/Generic Downloader.x
MAX	malware (ai score=81)
DeepInstinct	MALICIOUS
Cylance	unsafe
Panda	Trj/Chgt.AD
TrendMicro-HouseCall	Trojan.MSIL.SERAPH.USPAXHP23
Rising	Ransom.Blocker!8.12A (CLOUD)
Yandex	Trojan.Igent.b0Ix0Q.4
SentinelOne	Static AI – Malicious PE
Fortinet	MSIL/Agent.POM!tr.dldr
AVG	Win32:PWSX-gen [Trj]
Avast	Win32:PWSX-gen [Trj]