Trojan:MSIL/DarkStealer.MK!MTB malicious file

The Trojan:MSIL/DarkStealer.MK!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:MSIL/DarkStealer.MK!MTB virus can do?

Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Trojan:MSIL/DarkStealer.MK!MTB?


File Info:
crc32: E9423729
md5: 70c80253c09aacccddce335b5f3513b4
name: upload_file
sha1: f0a87849b3e2306ce3688cb65fcab8ae74e1bba4
sha256: 6be2502f47fd78cdabd91d5d2aa199112cf22a4cb9302e3fca67c34ab0ff9d48
sha512: 85697ac775ed1d923413dacd57b35dcfb5ddf0ad391733c6972f5106dd3502a3537ee1591764003af1364da0863daff4742c1aadbecf988a7b30eb9784e4ec2c
ssdeep: 24576:c3wnvonk966oRXeY1Lj/XoIi/jV+Rz+EO6iOs:ZUk0VoY1LjGrYM
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:
Translation: 0x0000 0x04b0
LegalCopyright: Intel xa9  2020 Control plugin
Assembly Version: 2.0.0.0
InternalName: Echelon.exe
FileVersion: 2.0.0.0
CompanyName: Intel plugin
LegalTrademarks: adfgag
Comments: Intel plugin
ProductName: Intel plugin
ProductVersion: 2.0.0.0
FileDescription: Intel plugin
OriginalFilename: Echelon.exe

Trojan:MSIL/DarkStealer.MK!MTB also known as:

TrendMicro	TROJ_GEN.R067C0DJF20
Cyren	W32/MSIL_Kryptik.BFO.gen!Eldorado
APEX	Malicious
ClamAV	Win.Packed.Ursu-9446822-0
Kaspersky	HEUR:Trojan-PSW.MSIL.Coins.gen
DrWeb	Trojan.PWS.StealerNET.52
McAfee-GW-Edition	BehavesLike.Win32.Generic.vm
FireEye	Generic.mg.70c80253c09aaccc
Ikarus	Trojan.Win32.DarkStealer
eGambit	Trojan.Generic
Microsoft	Trojan:MSIL/DarkStealer.MK!MTB
ZoneAlarm	HEUR:Trojan-PSW.MSIL.Coins.gen
GData	Win32.Trojan.Agent.KQTBDH
AhnLab-V3	Trojan/Win32.CoinStealer.C4161208
McAfee	Artemis!70C80253C09A
Malwarebytes	Spyware.Echelon
Panda	Trj/CI.A
ESET-NOD32	a variant of MSIL/Spy.Agent.AES
TrendMicro-HouseCall	TROJ_GEN.R067C0DJF20
SentinelOne	DFI – Malicious PE
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	MSIL/CoinStealer.CC!tr
BitDefenderTheta	Gen:NN.ZemsilF.34570.vo0@aeouoEp
AVG	FileRepMalware
Cybereason	malicious.3c09aa

How to remove Trojan:MSIL/DarkStealer.MK!MTB?

Trojan:MSIL/DarkStealer.MK!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

Trojan:MSIL/DarkStealer.MK!MTB malicious file