How to remove “Trojan:MSIL/Seraph.AAKH!MTB”?

The Trojan:MSIL/Seraph.AAKH!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:MSIL/Seraph.AAKH!MTB virus can do?

CAPE extracted potentially suspicious content
Authenticode signature is invalid

How to determine Trojan:MSIL/Seraph.AAKH!MTB?


File Info:
name: 356B27A302D856C809EC.mlw
path: /opt/CAPEv2/storage/binaries/4614cb3ef8daf35e2b69d9b7b65139333e6d5785c09b08ac2694abefc12c503c
crc32: 9C3CA426
md5: 356b27a302d856c809ec2e8b77b6807f
sha1: 1cf9527af13f2cb21bc1671595bffe08e8ddc8fd
sha256: 4614cb3ef8daf35e2b69d9b7b65139333e6d5785c09b08ac2694abefc12c503c
sha512: 72627bc106da49759c79bac3567ed5542a71b6b1725b70d53453ae1c5b5c822403c3e0588822577f27451f03be5c64e2d4f86d088597673c255ef0de206300b0
ssdeep: 768:xG0YelP09U4295duAAaZR5Sv9aCQ2N2s8Fe+zpZEQDY:rdl5PAaZ/Sv93Q28FHzpZ10
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1A9537D0BA758433FF09306B52BBA63525A38E46E5775C3CF304C54A92F11BE4A772366
sha3_384: 751d677704274449d3cdc86018b827908bb73578f3d891e7313b65f4cfd769fd69ffe486d9b05b8b35a9043b4c3f27ba
ep_bytes: ff257014410000000000000000004414
timestamp: 2023-08-14 00:10:22

Version Info:
Translation: 0x0000 0x04b0
Comments: 
CompanyName: 
FileDescription: 
FileVersion: 1.0.0.0
InternalName: V147.exe
LegalCopyright: 
LegalTrademarks: 
OriginalFilename: V147.exe
ProductName: 
ProductVersion: 1.0.0.0
Assembly Version: 1.0.0.0

Trojan:MSIL/Seraph.AAKH!MTB also known as:

Bkav	W32.Common.6E208C5A
Lionic	Trojan.Win32.Seraph.4!c
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
FireEye	Gen:Variant.Marsilia.50305
McAfee	Artemis!356B27A302D8
Malwarebytes	Trojan.PureCrypter
Sangfor	Downloader.Msil.Seraph.Vk3o
CrowdStrike	win/malicious_confidence_70% (W)
Alibaba	TrojanDownloader:MSIL/Seraph.bb431c00
BitDefenderTheta	Gen:NN.ZemsilF.36350.em0@auNW6xj
Cyren	W32/MSIL_Agent.FQK.gen!Eldorado
Symantec	MSIL.Downloader!gen8
ESET-NOD32	a variant of MSIL/Kryptik_AGen.BEZ
APEX	Malicious
Kaspersky	HEUR:Trojan-Downloader.MSIL.Seraph.gen
BitDefender	Gen:Variant.Marsilia.50305
MicroWorld-eScan	Gen:Variant.Marsilia.50305
Avast	Win32:PWSX-gen [Trj]
Emsisoft	Gen:Variant.Marsilia.50305 (B)
F-Secure	Trojan.TR/Redcap.yezyv
DrWeb	Trojan.DownLoaderNET.713
TrendMicro	TROJ_GEN.R002C0DHF23
McAfee-GW-Edition	BehavesLike.Win32.Fareit.kh
Trapmine	malicious.moderate.ml.score
Sophos	Mal/Generic-S
SentinelOne	Static AI – Malicious PE
GData	Gen:Variant.Marsilia.50305
Avira	TR/Redcap.yezyv
Antiy-AVL	Trojan/MSIL.Kryptik
ZoneAlarm	HEUR:Trojan-Downloader.MSIL.Seraph.gen
Microsoft	Trojan:MSIL/Seraph.AAKH!MTB
Google	Detected
AhnLab-V3	Trojan/Win.AgentTesla.C5471094
MAX	malware (ai score=82)
Cylance	unsafe
Panda	Trj/Chgt.AD
TrendMicro-HouseCall	TROJ_GEN.R002C0DHF23
Rising	Malware.Obfus/MSIL@AI.92 (RDM.MSIL2:8yHUc5NOLU6/Epl7qfEqvA)
Yandex	Trojan.Igent.b0FTio.2
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	MSIL/Kryptik.BEZ!tr
AVG	Win32:PWSX-gen [Trj]
Cybereason	malicious.af13f2
DeepInstinct	MALICIOUS

How to remove Trojan:MSIL/Seraph.AAKH!MTB?

Trojan:MSIL/Seraph.AAKH!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X