Categories: Trojan

Trojan:MSIL/DscStealer.RPZ!MTB (file analysis)

The Trojan:MSIL/DscStealer.RPZ!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:MSIL/DscStealer.RPZ!MTB virus can do?

Authenticode signature is invalid
Anomalous .NET characteristics

How to determine Trojan:MSIL/DscStealer.RPZ!MTB?


File Info:
name: 6C13F255AD197B339877.mlwpath: /opt/CAPEv2/storage/binaries/8680e7dfbbe2a7b74b7be4e71702dbecebd519d95c08a55bf3286ddb13ceff28crc32: E4DA835Dmd5: 6c13f255ad197b339877916978b2f1f4sha1: 684e9b4d3aea5eae7a1cdc5a34836a9052d98dc9sha256: 8680e7dfbbe2a7b74b7be4e71702dbecebd519d95c08a55bf3286ddb13ceff28sha512: fdc93fccfcc0091d6f8af5953abbb2ce4eee24d2566290507ad216a0c5a2108e36ac38dd835a7f4dba853137bc5f0aa8a0a8ec6aec91a61149eb89f1ed96dfebssdeep: 192:659iA3AhnkKgJCFi3FiPH7UEjkYcDaVKrgIe4Fpw8:65F3At8Wi1iPHguklawgIHpwtype: PE32 executable (console) Intel 80386, for MS Windowstlsh: T179F1D91AB3E84921E8FE477944B202012371B6926C13EB0C2CDC469A6C33B656FE3771sha3_384: 8362c04c372f2b4c6c3a32c9de40f48f83e3201d855ad75c51d282cd672796f1382905dd45b27a98d7546fb16a2fde6cep_bytes: ff250020400000000000000000000000timestamp: 2023-02-10 00:40:19
Version Info:
Translation: 0x0000 0x04b0FileDescription:  FileVersion: 0.0.0.0InternalName: supersex_c64641c6a0a8a6dd9bdbc77ab5cf02322242121048672b7c13da78df0a044fda.exeLegalCopyright:  OriginalFilename: supersex_c64641c6a0a8a6dd9bdbc77ab5cf02322242121048672b7c13da78df0a044fda.exeProductVersion: 0.0.0.0Assembly Version: 0.0.0.0

Trojan:MSIL/DscStealer.RPZ!MTB also known as:

Bkav	W32.AIDetectNet.01
Lionic	Trojan.Win32.Disco.4!c
Elastic	malicious (high confidence)
Cynet	Malicious (score: 99)
FireEye	Generic.mg.6c13f255ad197b33
CAT-QuickHeal	Trojanpws.Disco
McAfee	Artemis!6C13F255AD19
Zillya	Trojan.Disco.Win32.9218
Sangfor	Spyware.Win32.Disco.Vb8x
K7AntiVirus	Spyware ( 0059ef501 )
Alibaba	TrojanPSW:Win32/Disco.4658e154
K7GW	Spyware ( 0059ef501 )
VirIT	Trojan.Win32.SpyLoad.LM
Cyren	W32/MSIL_Kryptik.IYK.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of MSIL/Spy.Agent.EIV
APEX	Malicious
Paloalto	generic.ml
Kaspersky	HEUR:Trojan-PSW.Win32.Disco.gen
BitDefender	IL:Trojan.MSILZilla.25316
NANO-Antivirus	Trojan.Win32.Disco.juwvpy
MicroWorld-eScan	IL:Trojan.MSILZilla.25316
Avast	Win32:SpywareX-gen [Trj]
Tencent	Trojan-Psw.Win32.Disco.kb
TACHYON	Trojan-PWS/W32.DN-Disco.8192.B
Sophos	Troj/Disteal-AB
F-Secure	Trojan.TR/Spy.Agent.gwmwz
DrWeb	BackDoor.SpyBotNET.56
VIPRE	IL:Trojan.MSILZilla.25316
TrendMicro	TROJ_GEN.R002C0PBD23
McAfee-GW-Edition	BehavesLike.Win32.Generic.xt
Emsisoft	IL:Trojan.MSILZilla.25316 (B)
GData	IL:Trojan.MSILZilla.25316
Avira	TR/Spy.Agent.gwmwz
Antiy-AVL	Trojan/Win32.Wacatac
Arcabit	IL:Trojan.MSILZilla.D62E4
Microsoft	Trojan:MSIL/DscStealer.RPZ!MTB
Google	Detected
AhnLab-V3	Trojan/Win.MSILZilla.R559134
ALYac	IL:Trojan.MSILZilla.25316
MAX	malware (ai score=85)
VBA32	TScope.Trojan.MSIL
Malwarebytes	Spyware.DiscordStealer.MSIL
TrendMicro-HouseCall	TROJ_GEN.R002C0PBD23
Rising	Spyware.Agent!8.C6 (CLOUD)
Ikarus	Trojan.MSIL.Spy
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	MSIL/SxDisco.A!tr
AVG	Win32:SpywareX-gen [Trj]
Panda	Trj/GdSda.A
CrowdStrike	win/malicious_confidence_100% (D)