Categories: Trojan

Trojan:MSIL/AgentTesla.MOC!MTB malicious file

The Trojan:MSIL/AgentTesla.MOC!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:MSIL/AgentTesla.MOC!MTB virus can do?

Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

How to determine Trojan:MSIL/AgentTesla.MOC!MTB?


File Info:
crc32: E0952F7Amd5: be32fd64b0000d935183356f7516e04ename: okoyecryp.exesha1: 6d9a5c87a4fa1eb3dd7433dc6076bdbfccbc2961sha256: b4edc5be2ae28fa9a6ff55d51c35871b81e59f988765087ca404421d2cd7670dsha512: e7334b0db3b352122eee02ea41fb73bbab58b8a2c858a78cb17817e880d678dc6229c017d12e5d4955e15cc2a434f323eb7e0c3125e0656bafad28d9d28a93eessdeep: 12288:alAGUbgZcz0V34++eSu+nmp5DQdSLYkt1TML1dm07gRhSgzBOVV/p0:aRU8y0hhSgEtype: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Version Info:
LegalCopyright: x7248x6743x6240x6709 (C) 2013InternalName: EMailSpliterFileVersion: 1, 0, 0, 1CompanyName: by suruiqiang (Y!M: suruiqiang)ProductName: EMailSpliterProductVersion: 1, 0, 0, 1FileDescription: EMailSpliterOriginalFilename: EMailSpliter.EXETranslation: 0x0804 0x04b0

Trojan:MSIL/AgentTesla.MOC!MTB also known as:

DrWeb	Trojan.KillProc2.8825
MicroWorld-eScan	Trojan.GenericKD.33298053
McAfee	Packed-FWY!BE32FD64B000
Cylance	Unsafe
Sangfor	Malware
K7AntiVirus	Trojan ( 0056081c1 )
BitDefender	Trojan.GenericKD.33298053
K7GW	Trojan ( 0056081c1 )
Arcabit	Trojan.Generic.D1FC1685
BitDefenderTheta	Gen:NN.ZemsilF.34090.Ym0@a0dVI6sj
Cyren	W32/Trojan.OBRB-0256
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Kryptik.UQP
APEX	Malicious
Paloalto	generic.ml
Kaspersky	HEUR:Backdoor.MSIL.Androm.gen
Alibaba	Trojan:Win32/csharp.ali2000008
NANO-Antivirus	Trojan.Win32.Androm.hbeypj
ViRobot	Trojan.Win32.S.Agent.829440.BA
Ad-Aware	Trojan.GenericKD.33298053
Emsisoft	Trojan.Crypt (A)
Comodo	Malware@#1dv3yv7b6fpxz
F-Secure	Trojan.TR/Kryptik.mjfco
TrendMicro	Trojan.Win32.DETPLOCK.USXVPBJ20
McAfee-GW-Edition	Packed-FWY!BE32FD64B000
Trapmine	malicious.moderate.ml.score
FireEye	Generic.mg.be32fd64b0000d93
Sophos	Mal/Generic-S
Jiangmin	Backdoor.MSIL.cohh
Avira	TR/Kryptik.mjfco
Fortinet	MSIL/Kryptik.UQP!tr
Antiy-AVL	Trojan/Win32.Wacatac
Endgame	malicious (high confidence)
Microsoft	Trojan:MSIL/AgentTesla.MOC!MTB
ZoneAlarm	HEUR:Backdoor.MSIL.Androm.gen
AhnLab-V3	Trojan/Win32.Agent.R284273
Acronis	suspicious
ALYac	Trojan.Agent.Wacatac
MAX	malware (ai score=80)
Panda	Trj/GdSda.A
TrendMicro-HouseCall	Trojan.Win32.DETPLOCK.USXVPBJ20
Rising	Backdoor.Androm!8.113 (TFE:C:FsvtluOCNW)
Ikarus	Trojan.MSIL.Inject
GData	Win32.Trojan-Stealer.LokiBot.CSMFHR
Webroot	W32.Trojan.Gen
AVG	Win32:TrojanX-gen [Trj]
Avast	Win32:TrojanX-gen [Trj]
CrowdStrike	win/malicious_confidence_60% (W)
Qihoo-360	Generic/Backdoor.9cf