Trojan:MSIL/AgentTesla.MBFI!MTB malicious file

The Trojan:MSIL/AgentTesla.MBFI!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:MSIL/AgentTesla.MBFI!MTB virus can do?

Sample contains Overlay data
Authenticode signature is invalid

How to determine Trojan:MSIL/AgentTesla.MBFI!MTB?


File Info:
name: 7E3A33F0017DAB23EC21.mlw
path: /opt/CAPEv2/storage/binaries/919d68f5a5f13100991944dc26b0a1859dfe9b51e1b27cf467b8cbec7f1d9ea6
crc32: 9FF78DC7
md5: 7e3a33f0017dab23ec21b29639e3570f
sha1: d22839c4a4b59609f784e88b47c5bf0c90f10c21
sha256: 919d68f5a5f13100991944dc26b0a1859dfe9b51e1b27cf467b8cbec7f1d9ea6
sha512: b8fb27aa67360ff90e7c97832cd475053349eb832231f170edc2507803d8fb398a2b6bcc24669b99b3f151e8936388f090708adb21ed2cfe520e3586a3bfe559
ssdeep: 6144:x6+7XwWk76luTsLx+jo3d2BwzjnGlyajSoabnszY8xghFBF/tAj8:3AWk76F5ywuy+IszY4qFVAj8
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T194F45324997E1913C064C3BDD6C1E32FAA9D4C9724209B321CC27FCE5F7AA06159BD6E
sha3_384: ae09389981f0b1bfc5751b05d0e6d4fdac93b84294a3abf5f4a45b11ea692314726100e0dc0dccbeeb52cd0be2113cde
ep_bytes: 
timestamp: 2023-06-30 08:19:23

Version Info:
0: [No Data]

Trojan:MSIL/AgentTesla.MBFI!MTB also known as:

Bkav	W32.Common.E9F21C73
Malwarebytes	Malware.AI.4259728550
Sangfor	Trojan.Msil.Agent.Vbwd
CrowdStrike	win/malicious_confidence_90% (W)
DrWeb	Trojan.Loader.1574
McAfee-GW-Edition	BehavesLike.Win32.Generic.bh
SentinelOne	Static AI – Malicious PE
GData	Win32.Trojan.Agent.NH39KB
Google	Detected
Xcitium	Heur.Corrupt.PE@1z141z3
Microsoft	Trojan:MSIL/AgentTesla.MBFI!MTB
Cynet	Malicious (score: 100)
TrendMicro-HouseCall	TROJ_GEN.R002H01G323
Rising	Malware.Obfus/MSIL@AI.100 (RDM.MSIL2:SIJ8BXk7V9thkr/SyJhglA)
Ikarus	Trojan.MSIL.Agent
Fortinet	MSIL/Agent.PWSX!tr
DeepInstinct	MALICIOUS

How to remove Trojan:MSIL/AgentTesla.MBFI!MTB?

Trojan:MSIL/AgentTesla.MBFI!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X