Categories: Trojan

Trojan:MSIL/RedLineStealer.KAI!MTB removal

The Trojan:MSIL/RedLineStealer.KAI!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:MSIL/RedLineStealer.KAI!MTB virus can do?

Sample contains Overlay data
Presents an Authenticode digital signature
CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Trojan:MSIL/RedLineStealer.KAI!MTB?


File Info:
name: 58B5E1651F22758360E2.mlwpath: /opt/CAPEv2/storage/binaries/338a9ed485b7c08b597c939fe179b45da817e793fe2114be6250f33c58efc6e8crc32: F673EC01md5: 58b5e1651f22758360e232c203161384sha1: 9117da79734dd03a122b99c18f9fc9ce4c1b337bsha256: 338a9ed485b7c08b597c939fe179b45da817e793fe2114be6250f33c58efc6e8sha512: 6be1ca77ba3d802e463b4d0272256b40e0b306e2c9ee3b51841194cd2a58edfd19683acf2ae558d0445ae3c351a96162cc8f5ecd1ab1774f1632771da07e4fabssdeep: 6144:paNimhRi9vYZ4uCm7KkjnI0jiYMN4x3zzGwJCil/6tuOO1jjkgXhzJU:E/hw9vYZ4eW85jiYM+RzLCixcuB1nkg4type: PE32 executable (console) Intel 80386, for MS Windowstlsh: T1AB7423ACEA132811CC0E18B17585D8212BF093C4D6DBD46AF2D5A854AF263CF7FA438Dsha3_384: e0ef15c6f380c23d1ae8b18e45ff4a0c78c40091aa32e061c2049dd4f8e337bd4c1274c3e63107fcd679cd6114464689ep_bytes: ff250020400000000000000000000000timestamp: 2024-02-25 11:51:27
Version Info:
Translation: 0x0000 0x04b0Comments: Ionosondes Defensemen WrenchinglyCompanyName: Entertainment NetworkFileDescription: PermitteeFileVersion: 1.0.0.0InternalName: Displacement.exeLegalCopyright: Copyright 2023OriginalFilename: Displacement.exeProductName: Troubling Ultravacuum LegitimatorProductVersion: 1.0.0.0Assembly Version: 1.0.0.0

Trojan:MSIL/RedLineStealer.KAI!MTB also known as:

Bkav	W32.AIDetectMalware.CS
AVG	Win32:PWSX-gen [Trj]
DrWeb	Trojan.Inject5.2873
MicroWorld-eScan	Gen:Variant.Ser.Zusy.4899
FireEye	Generic.mg.58b5e1651f227583
Skyhigh	Artemis!Trojan
McAfee	Artemis!58B5E1651F22
Malwarebytes	Trojan.Crypt.MSIL
Sangfor	Trojan.Msil.Kryptik.Vwkl
K7AntiVirus	Trojan ( 005b21931 )
Alibaba	Trojan:MSIL/RedLineStealer.2488514c
K7GW	Trojan ( 005b21931 )
CrowdStrike	win/malicious_confidence_100% (W)
BitDefenderTheta	Gen:NN.ZemsilF.36802.vm2@aKzudCj
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of MSIL/Kryptik.ALAE
APEX	Malicious
Avast	Win32:PWSX-gen [Trj]
Kaspersky	HEUR:Trojan.MSIL.Injuke.gen
BitDefender	Gen:Variant.Ser.Zusy.4899
NANO-Antivirus	Trojan.Win32.Injuke.kkalim
Rising	Malware.Obfus/MSIL@AI.100 (RDM.MSIL2:Z4nzjYtmw2fCE5AObRhxPQ)
Sophos	Troj/Steal-DVK
F-Secure	Trojan.TR/AD.RedLineSteal.wojyt
Zillya	Trojan.GenKryptik.Win32.494486
TrendMicro	TrojanSpy.Win32.REDLINE.YXEBZZ
Emsisoft	Gen:Variant.Ser.Zusy.4899 (B)
Ikarus	Trojan.MSIL.Krypt
Google	Detected
Avira	TR/AD.RedLineSteal.wojyt
Kingsoft	malware.kb.c.929
Microsoft	Trojan:MSIL/RedLineStealer.KAI!MTB
Arcabit	Trojan.Ser.Zusy.D1323
ZoneAlarm	HEUR:Trojan.MSIL.Injuke.gen
GData	Gen:Variant.Ser.Zusy.4899
Varist	W32/MSIL_Agent.HQD.gen!Eldorado
AhnLab-V3	Trojan/Win.PWSX-gen.C5593732
ALYac	Gen:Variant.Ser.Zusy.4899
VBA32	TScope.Trojan.MSIL
Cylance	unsafe
Panda	Trj/Chgt.AD
TrendMicro-HouseCall	TrojanSpy.Win32.REDLINE.YXEBZZ
Tencent	Malware.Win32.Gencirc.11bcd61f
MAX	malware (ai score=83)
MaxSecure	Trojan.Malware.74181957.susgen
Fortinet	MSIL/GenKryptk.GUGT!tr
DeepInstinct	MALICIOUS