Trojan

Should I remove “Trojan:MSIL/LummaStealer.SPPS!MTB”?

Malware Removal

The Trojan:MSIL/LummaStealer.SPPS!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Trojan:MSIL/LummaStealer.SPPS!MTB virus can do?

  • CAPE extracted potentially suspicious content
  • The binary likely contains encrypted or compressed data.
  • .NET file is packed/obfuscated with SmartAssembly
  • Authenticode signature is invalid
  • Anomalous .NET characteristics

How to determine Trojan:MSIL/LummaStealer.SPPS!MTB?



File Info:

name: 1E25ABA42B47BC31C6CB.mlw
path: /opt/CAPEv2/storage/binaries/e20124da608445d9df1c71b1ad3530331a86b773b0b2f6a43ad32ec3d061a297
crc32: 04C5F98C
md5: 1e25aba42b47bc31c6cb50b92125dddf
sha1: 8e6c2d9d8e16805de72eca40a8db4ad3123df49b
sha256: e20124da608445d9df1c71b1ad3530331a86b773b0b2f6a43ad32ec3d061a297
sha512: 6035464800d5fa2c50a5a2d7a1d23bf82542058c628d0ac1ce2b10558d8b0a4cbd9d006d32082d9b0f085653df9a152ef3bae9484027621be014f963cb5fbfc5
ssdeep: 393216:dDjJs+1GTZKtomDWCrq4ZWpY+MIIQXEOWHA:ljJVGLZMq4wp1MIZXEOWg
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T116D63318B3D98CE5C60D8E75E146816930D6BD4485DAD36FA88F3FD09C323E7E89E609
sha3_384: 575677e9869621f1376dc54c36747c588c458ca640367669b0029d118bbec7260ca098ccfeda1ae9f2c318ff73055e5e
ep_bytes: ff250020400000000000000000000000
timestamp: 2023-12-28 13:17:00


Version Info:

Comments: This installation was built with Inno Setup.
CompanyName: FreeFileSync.org                                            
FileDescription: FreeFileSync Setup                                          
FileVersion: 12.5                
LegalCopyright: Zenju - All Rights Reserved                                                                         
OriginalFileName:                                                   
ProductName: FreeFileSync                                                
ProductVersion: 12.5                                              
Translation: 0x0000 0x04b0

Trojan:MSIL/LummaStealer.SPPS!MTB also known as:

LionicTrojan.Win32.Stealer.12!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Zusy.530352
FireEyeGeneric.mg.1e25aba42b47bc31
SkyhighArtemis!Trojan
McAfeeArtemis!1E25ABA42B47
Cylanceunsafe
VIPREGen:Variant.Zusy.530352
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 0059e0d61 )
AlibabaTrojanSpy:MSIL/LummaStealer.247c3acb
K7GWTrojan ( 0059e0d61 )
CrowdStrikewin/malicious_confidence_100% (W)
BitDefenderThetaGen:NN.ZemsilF.36744.@p0@aaQ@5Iii
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/Kryptik.AHUA
APEXMalicious
KasperskyHEUR:Trojan-Spy.MSIL.Stealer.gen
BitDefenderGen:Variant.Zusy.530352
AvastWin32:CrypterX-gen [Trj]
TencentMalware.Win32.Gencirc.13fdf93c
EmsisoftGen:Variant.Zusy.530352 (B)
F-SecureTrojan.TR/AD.VidarStealer.hmwwb
DrWebTrojan.Inject5.617
TrendMicroTrojanSpy.Win32.VIDAR.YXEASZ
Trapminemalicious.high.ml.score
SophosMal/MSIL-VD
IkarusTrojan.MSIL.Injector
GDataWin32.Trojan-Stealer.Arkei.L2Q4YJ
AviraTR/AD.VidarStealer.hmwwb
Antiy-AVLTrojan/MSIL.Kryptik
ArcabitTrojan.Zusy.D817B0
ZoneAlarmHEUR:Trojan-Spy.MSIL.Stealer.gen
MicrosoftTrojan:MSIL/LummaStealer.SPPS!MTB
VaristW32/ABRisk.MWFG-1264
AhnLab-V3Backdoor/Win.Generic.C4547022
ALYacGen:Variant.Zusy.530352
MAXmalware (ai score=83)
MalwarebytesTrojan.Crypt.MSIL
PandaTrj/GdSda.A
TrendMicro-HouseCallTrojanSpy.Win32.VIDAR.YXEASZ
RisingMalware.Obfus/MSIL@AI.100 (RDM.MSIL2:l61OV2ltwl7RvPqLUR0k/Q)
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/Kryptik.AHBB!tr
AVGWin32:CrypterX-gen [Trj]
Cybereasonmalicious.d8e168
DeepInstinctMALICIOUS

How to remove Trojan:MSIL/LummaStealer.SPPS!MTB?

Trojan:MSIL/LummaStealer.SPPS!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment