Trojan:MSIL/Coinminer.UF!MTB removal

The Trojan:MSIL/Coinminer.UF!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:MSIL/Coinminer.UF!MTB virus can do?

Sample contains Overlay data
Authenticode signature is invalid
CAPE detected the XWorm malware family

How to determine Trojan:MSIL/Coinminer.UF!MTB?


File Info:
name: E7CCB675ADE035C2E6DC.mlw
path: /opt/CAPEv2/storage/binaries/8062f59c5368bdc106aed12e2df30260d0807a27760497b54c5ed71c2a6498dc
crc32: 4DA833EC
md5: e7ccb675ade035c2e6dc8933ecee4351
sha1: 6699c0b42f5923075d6f9dee73c27b378d57874b
sha256: 8062f59c5368bdc106aed12e2df30260d0807a27760497b54c5ed71c2a6498dc
sha512: a4f8ddd1bcbd9b19fa3b95117f90e13ef0e4ab1384b4cf88c243946775d6796ec8cf0aef4d8ae5180e5924ea8a5a1fca456d8110dd5737649afee8c0b7951d8c
ssdeep: 384:w7wTA+5OfPgEBQqWvfcQLZe3sw0hYACSqRDP/Q2uRugtFuBLTIOZw/WVnvn9IkVi:irgECfLHwMYAoRDPI2uBFE9RzOqhQb
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T171434B483BE58327D6FE2FF619B6A00102759507D923EF5F4CD895A7AF67AC142003DA
sha3_384: 49487a5bb9f3827398f540034e72dafb80e41d958fc0260be44e239cfe0cdb6cd9e7c3c17614a343022f24745848aec4
ep_bytes: 6f636b657453687574646f776e005368
timestamp: 2023-09-16 15:59:34

Version Info:
0: [No Data]

Trojan:MSIL/Coinminer.UF!MTB also known as:

Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
FireEye	Generic.mg.e7ccb675ade035c2
Malwarebytes	Generic.Malware.AI.DDS
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_90% (D)
APEX	Malicious
ClamAV	Win.Packed.njRAT-10002074-1
Tencent	Trojan.Msil.Blocker.16000561
McAfee-GW-Edition	BehavesLike.Win32.Generic.qz
Trapmine	malicious.moderate.ml.score
Sophos	Generic ML PUA (PUA)
Microsoft	Trojan:MSIL/Coinminer.UF!MTB
Google	Detected
Rising	Backdoor.XWorm!1.E338 (CLASSIC)
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
Cybereason	malicious.42f592
DeepInstinct	MALICIOUS

How to remove Trojan:MSIL/Coinminer.UF!MTB?

Trojan:MSIL/Coinminer.UF!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X