Trojan

Trojan:MSIL/SnakeKeylogger.ST!MTB (file analysis)

Malware Removal

The Trojan:MSIL/SnakeKeylogger.ST!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Trojan:MSIL/SnakeKeylogger.ST!MTB virus can do?

  • CAPE extracted potentially suspicious content
  • Authenticode signature is invalid

How to determine Trojan:MSIL/SnakeKeylogger.ST!MTB?



File Info:

name: 47021793B9664F422A6C.mlw
path: /opt/CAPEv2/storage/binaries/b70e6f39b840b7790364b6ec0e15a349ee1d4ff4ddd0c520e7396aaac9790813
crc32: 643BAE5D
md5: 47021793b9664f422a6cfe328bd0261f
sha1: 3a683d223103defcb32ebccbd7a3b709d2d97a7b
sha256: b70e6f39b840b7790364b6ec0e15a349ee1d4ff4ddd0c520e7396aaac9790813
sha512: 35166550d2001c00b8d77ee4d25b519e2ef7f10df9c9138a507de6564092ef56138cb1f789450466aa2359881f089cff4e127127f13e10edb5c1a696960b69e4
ssdeep: 384:BFtfb/bbfgUEdYpXZellxO8RnhKO7GGe/gkB8BFy7BYxKej947g4Y4GAb8LXrgLO:BbfXbnzggZKvbh9OLeI8fbO
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T10F73C282F144DCA6D92765F5AC3ACA14105A7D5E8438CA1E364F7B2E15F334720ABE3E
sha3_384: b9c28a441c4529ce7198c49c336f3aa82dae8a5eeff0aa9f52cc5a21c285721d9b745bfc59e4f7d4fa3f1c9056409d08
ep_bytes: ff250020400000000000000000000000
timestamp: 2022-06-02 08:28:48


Version Info:

Translation: 0x0000 0x04b0
Comments: TPM Initialization Wizard
CompanyName: Microsoft Corporation
FileDescription: TPM Initialization Wizard
FileVersion: 6.3.9600.17415
InternalName: Niome.exe
LegalCopyright: © Microsoft Corporation. All rights reserved.
LegalTrademarks: 
OriginalFilename: Niome.exe
ProductName: Microsoft® Windows® Operating System
ProductVersion: 6.3.9600.17415
Assembly Version: 6.3.9600.17415

Trojan:MSIL/SnakeKeylogger.ST!MTB also known as:

BkavW32.AIDetectMalware.CS
LionicTrojan.Win32.LovGate.a!c
MicroWorld-eScanTrojan.GenericKD.39730007
FireEyeGeneric.mg.47021793b9664f42
CAT-QuickHealTrojan.YakbeexMSIL.ZZ4
SkyhighBehavesLike.Win32.CoinMiner.lm
McAfeeAgentTesla-FDIL!47021793B966
MalwarebytesBackdoor.Quasar
ZillyaDownloader.Agent.Win32.548450
SangforSuspicious.Win32.Save.a
K7AntiVirusTrojan ( 00593bc11 )
AlibabaTrojanDownloader:MSIL/SnakeKeylogger.5371de2a
K7GWTrojan ( 00593bc11 )
VirITTrojan.Win32.MSIL_Heur.A
SymantecMSIL.Downloader!gen7
Elasticmalicious (high confidence)
ESET-NOD32a variant of MSIL/TrojanDownloader.Agent.MAO
APEXMalicious
KasperskyHEUR:Trojan-Downloader.MSIL.Seraph.gen
BitDefenderTrojan.GenericKD.39730007
NANO-AntivirusTrojan.Win32.Seraph.jryrzb
AvastWin32:DropperX-gen [Drp]
TencentMalware.Win32.Gencirc.13ba1a44
EmsisoftTrojan.GenericKD.39730007 (B)
DrWebTrojan.Inject4.33418
VIPRETrojan.GenericKD.39730007
TrendMicroTROJ_GEN.R002C0DLT23
Trapminemalicious.moderate.ml.score
SophosTroj/DwnLd-AFX
SentinelOneStatic AI – Malicious PE
MAXmalware (ai score=100)
GDataTrojan.GenericKD.39730007
JiangminTrojanDownloader.MSIL.akqc
GoogleDetected
VaristW32/MSIL_Kryptik.GME.gen!Eldorado
Antiy-AVLWorm[Email]/MSIL.LovGate
Kingsoftmalware.kb.c.999
XcitiumMalware@#vu1nbybfvt0j
ArcabitTrojan.Generic.D25E3B57
ZoneAlarmHEUR:Trojan-Downloader.MSIL.Seraph.gen
MicrosoftTrojan:MSIL/SnakeKeylogger.ST!MTB
AhnLab-V3Trojan/Win.DownLoader.C5155203
Acronissuspicious
BitDefenderThetaGen:NN.ZemsilF.36744.em0@aaRLgCe
ALYacTrojan.GenericKD.39730007
VBA32TrojanSpy.Snake
Cylanceunsafe
PandaTrj/Chgt.AD
TrendMicro-HouseCallTROJ_GEN.R002C0DLT23
RisingMalware.Obfus/MSIL@AI.97 (RDM.MSIL2:1rZNW2IpP/awBvv3RLX8gw)
YandexTrojan.Igent.bX7kgY.3
IkarusTrojan-Downloader.MSIL.Agent
MaxSecureTrojan.Malware.74570710.susgen
FortinetMSIL/Generik.BZNYUMT!tr
AVGWin32:DropperX-gen [Drp]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Trojan:MSIL/SnakeKeylogger.ST!MTB?

Trojan:MSIL/SnakeKeylogger.ST!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment