Trojan

What is “Trojan:MSIL/Coinminer.SBR!MSR”?

Malware Removal

The Trojan:MSIL/Coinminer.SBR!MSR is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:MSIL/Coinminer.SBR!MSR virus can do?

  • Dynamic (imported) function loading detected
  • Authenticode signature is invalid
  • Binary compilation timestomping detected

How to determine Trojan:MSIL/Coinminer.SBR!MSR?


File Info:

name: 2FBE9C987C39D220DC38.mlw
path: /opt/CAPEv2/storage/binaries/5c9fcd8484e86693fe94c8d2302084a3504a6225bf2133577bc5b0460f6e63c3
crc32: E50DE33B
md5: 2fbe9c987c39d220dc38f2e465a5a0b6
sha1: cb3ed69ac46700a1660394d94180553fe0ee5a40
sha256: 5c9fcd8484e86693fe94c8d2302084a3504a6225bf2133577bc5b0460f6e63c3
sha512: 3d945a731f9cc6e1e3e66c81f00754a0a0190f7a67ab30b12b39633615f41abda069e617ba9ccc9cd55621df8f7dab053e5c5ad0e636c4edd536bdb452f32776
ssdeep: 384:P2ezv1Fzl9ZkjiNxnJeLayD8PyOODv9SMIzrK0Nj2hv4lTwHc:PbzvTztNHyoIDR3AlF
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T180924A1227E8833AEAED0B7D68B2535003B2D65AB113DF994E88A19B3D17BD01551FF2
sha3_384: 4f6e0243a27e01dc573fdc833020883189566bb70f725c0f51e80a785ffb8b9fb993e76579590ee9e8a1ec7bc64f633f
ep_bytes: ff250020400000000000963007772c61
timestamp: 2038-08-31 01:34:51

Version Info:

Translation: 0x0000 0x04b0
Comments:
CompanyName:
FileDescription:
FileVersion: 1.0.0.0
InternalName: WindowsSecurityService.exe
LegalCopyright: Copyright © 2019-2020
LegalTrademarks:
OriginalFilename: WindowsSecurityService.exe
ProductName:
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Trojan:MSIL/Coinminer.SBR!MSR also known as:

LionicTrojan.MSIL.Convagent.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.MSILHeracles.11405
FireEyeGen:Variant.MSILHeracles.11405
CAT-QuickHealTrojan.YakbeexMSIL.ZZ4
ALYacGen:Variant.MSILHeracles.11405
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforTrojan.Win32.Agent.aa
K7AntiVirusTrojan ( 0056cbdc1 )
AlibabaTrojan:MSIL/Coinminer.5af6fa7a
K7GWTrojan ( 0056cbdc1 )
CrowdStrikewin/malicious_confidence_90% (W)
CyrenW32/MSIL_Kryptik.BMM.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/CoinMiner.BFL
APEXMalicious
Paloaltogeneric.ml
KasperskyHEUR:Trojan.MSIL.Convagent.gen
BitDefenderGen:Variant.MSILHeracles.11405
NANO-AntivirusTrojan.Win32.Convagent.ijbsik
AvastWin32:CoinminerX-gen [Trj]
TencentMsil.Trojan.Convagent.Hvtu
Ad-AwareGen:Variant.MSILHeracles.11405
SophosGeneric ML PUA (PUA)
DrWebTrojan.MinerNET.15
ZillyaTrojan.CoinMiner.Win32.29558
TrendMicroTROJ_GEN.R002C0DJS21
EmsisoftGen:Variant.MSILHeracles.11405 (B)
SentinelOneStatic AI – Malicious PE
GDataGen:Variant.MSILHeracles.11405
JiangminTrojan.MSIL.alqkq
AviraHEUR/AGEN.1138812
Antiy-AVLTrojan/Generic.ASMalwS.3137174
GridinsoftRansom.Win32.Gen.sa
MicrosoftTrojan:MSIL/Coinminer.SBR!MSR
CynetMalicious (score: 99)
AhnLab-V3Trojan/Win32.CoinMiner.R348964
McAfeeGenericRXNL-RA!2FBE9C987C39
MAXmalware (ai score=86)
VBA32TScope.Trojan.MSIL
MalwarebytesTrojan.BitCoinMiner
TrendMicro-HouseCallTROJ_GEN.R002C0DJS21
IkarusTrojan.MSIL.CoinMiner
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/CoinMiner.BFL!tr
BitDefenderThetaGen:NN.ZemsilF.34114.bm0@aCbSp!k
AVGWin32:CoinminerX-gen [Trj]
Cybereasonmalicious.87c39d
PandaTrj/GdSda.A

How to remove Trojan:MSIL/Coinminer.SBR!MSR?

Trojan:MSIL/Coinminer.SBR!MSR removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment