Trojan

Trojan:MSIL/Heracles.AMMA!MTB (file analysis)

Malware Removal

The Trojan:MSIL/Heracles.AMMA!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Trojan:MSIL/Heracles.AMMA!MTB virus can do?

  • Authenticode signature is invalid
  • Binary file triggered YARA rule

How to determine Trojan:MSIL/Heracles.AMMA!MTB?



File Info:

name: 673DD7435B21AE0BD9A7.mlw
path: /opt/CAPEv2/storage/binaries/fdecb6d9df9205cb6f46e80d6a0dceff4fb65ec54e1768afbe6ad8116c5621ab
crc32: 39476DC3
md5: 673dd7435b21ae0bd9a753e8a3479d93
sha1: 939562bb513b604400bc53d7cd26915f8d378f46
sha256: fdecb6d9df9205cb6f46e80d6a0dceff4fb65ec54e1768afbe6ad8116c5621ab
sha512: a1d2f6e84c487438d0c3721a1815c786b62f33e6675205dfa32222c07a8fa80ab9537a8cba23ec21612f74005ff3ebb38d182761077fcc39f0700e98e132ee70
ssdeep: 24576:SYwCOHRY4aytJk2us0L+VYVqSaZhusqBGkDCUn8De6ZCLIZ9MXgrfzVvjSnF0m1:4COxY4AMLVYuZhusqkkDCUn0XS
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1F7161811BEFA9E97D526073AD80345DB12B2E5DC5383EBAB229CC95B4D107881DED2C3
sha3_384: b972599c25395e362e43e155900cca23e1511a63531c0a4a76ddfd4681a11722cdb515c6ff72c9b1cb223c09917bfa9e
ep_bytes: ff25cc5380000000000000000000a053
timestamp: 2024-02-26 07:38:20


Version Info:

Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: 
FileVersion: 3.2.0.0
InternalName: Tdkdsxz.exe
LegalCopyright: 
LegalTrademarks: 
OriginalFilename: Tdkdsxz.exe
ProductName: 
ProductVersion: 3.2.0.0
Assembly Version: 3.2.0.0

Trojan:MSIL/Heracles.AMMA!MTB also known as:

BkavW32.AIDetectMalware.CS
LionicTrojan.Win32.Dacic.4!c
MicroWorld-eScanDeepScan:Generic.Dacic.1789.3730A544
FireEyeDeepScan:Generic.Dacic.1789.3730A544
CAT-QuickHealTrojan.Sabsik
SkyhighBehavesLike.Win32.Generic.rm
McAfeeArtemis!673DD7435B21
MalwarebytesTrojan.Downloader.MSIL.Generic
VIPREDeepScan:Generic.Dacic.1789.3730A544
SangforTrojan.Msil.Kryptik.Vwpn
K7AntiVirusTrojan ( 005b23c71 )
AlibabaTrojan:MSIL/PureCrypt.62f57c2f
K7GWTrojan ( 005b23c71 )
CrowdStrikewin/malicious_confidence_100% (W)
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of MSIL/Kryptik.ALAJ
APEXMalicious
TrendMicro-HouseCallTROJ_GEN.R002C0DC524
KasperskyTrojan.MSIL.PureCrypt.aq
BitDefenderDeepScan:Generic.Dacic.1789.3730A544
AvastWin32:CrypterX-gen [Trj]
TencentMalware.Win32.Gencirc.1403f7f8
SophosMal/Generic-S
GoogleDetected
F-SecureTrojan.TR/AD.Nekark.nbvdc
DrWebTrojan.DownLoaderNET.940
ZillyaTrojan.Kryptik.Win32.4674198
TrendMicroTROJ_GEN.R002C0DC524
EmsisoftDeepScan:Generic.Dacic.1789.3730A544 (B)
VaristW32/MSIL_Kryptik.KRA.gen!Eldorado
AviraTR/AD.Nekark.nbvdc
MAXmalware (ai score=86)
Antiy-AVLTrojan/MSIL.PureCrypt
KingsoftWin32.Troj.Unknown.a
MicrosoftTrojan:MSIL/Heracles.AMMA!MTB
ArcabitDeepScan:Generic.Dacic.1789.3730A544
ViRobotTrojan.Win.Z.Purecrypt.4219904
ZoneAlarmTrojan.MSIL.PureCrypt.aq
GDataDeepScan:Generic.Dacic.1789.3730A544
AhnLab-V3Infostealer/Win.VBkrypt.C5594430
ALYacDeepScan:Generic.Dacic.1789.3730A544
Cylanceunsafe
PandaTrj/Chgt.AD
RisingMalware.Obfus/MSIL@AI.100 (RDM.MSIL2:KV1nhAHMRJvFo04Dmu3X2Q)
IkarusTrojan.MSIL.Crypt
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/Kryptik.ALAJ!tr
AVGWin32:CrypterX-gen [Trj]
Cybereasonmalicious.35b21a
DeepInstinctMALICIOUS
alibabacloudTrojan:MSIL/Heracles.AMMA!MTB

How to remove Trojan:MSIL/Heracles.AMMA!MTB?

Trojan:MSIL/Heracles.AMMA!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment