Categories: Trojan

What is “Trojan:MSIL/Stealer.PF!MTB”?

The Trojan:MSIL/Stealer.PF!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:MSIL/Stealer.PF!MTB virus can do?

Sample contains Overlay data
Presents an Authenticode digital signature
CAPE extracted potentially suspicious content
Authenticode signature is invalid

How to determine Trojan:MSIL/Stealer.PF!MTB?


File Info:
name: A52A70FAB2EA87EFA46F.mlwpath: /opt/CAPEv2/storage/binaries/9ce01346d3a7036a1dc9414b20546a528d169b7b88125f1d83f2ae63ebce5a8ecrc32: 1C78FA48md5: a52a70fab2ea87efa46f8c13bef7e581sha1: 9be2fa990e3ccd2254f08627ecb988063cd5a725sha256: 9ce01346d3a7036a1dc9414b20546a528d169b7b88125f1d83f2ae63ebce5a8esha512: 3c8592474a3d614205d14243532497384a03a4fbc956532d6eaf7ea30f2c969cee3bcb824a3e91e096459a0a6437b34ca82ed05e94bf616fa82e2a4d17c24912ssdeep: 6144:skRzAMBg2cqIYdSRWIv3Y0n31Z/cckVsuI/1KWkM37aDu37aDcKEvqLsr26Z8tNg:sG8MM3RZQ0nH/Ca7km8tNtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T112D43B1377458755C610B57F42BAE6B12362EDC727108B1FA3CA8E17BE831C67E0EA58sha3_384: 608a5f5d767cafb1ccb4fff18f915383f68bb76d9e2d12c1ed0e371db514138dc16f062d00870a197db021b40e8003ecep_bytes: ff250020400000000000000000000000timestamp: 1976-12-28 14:28:46
Version Info:
LegalCopyright: © 2005-2019 Blizzard Entertainment Inc.InternalName: Battle.net SetupFileVersion: 1.16.3.2988CompanyName: Blizzard EntertainmentProductName: Battle.net SetupProductVersion: 1.16.3.2988FileDescription: Battle.net SetupOriginalFilename: Battle.net-Setup.exeTranslation: 0x0000 0x04b0

Trojan:MSIL/Stealer.PF!MTB also known as:

Bkav	W32.AIDetectMalware.CS
Lionic	Trojan.MSIL.Stealer.l!c
DrWeb	Trojan.Siggen10.47399
MicroWorld-eScan	IL:Trojan.MSILZilla.20187
Skyhigh	PWS-FCRY!A52A70FAB2EA
McAfee	PWS-FCRY!A52A70FAB2EA
Cylance	unsafe
Zillya	Trojan.Kryptik.Win32.2610564
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 005727c41 )
Alibaba	TrojanSpy:MSIL/Stealer.65bf2726
K7GW	Trojan ( 005727c41 )
Cybereason	malicious.90e3cc
Arcabit	IL:Trojan.MSILZilla.D4EDB
BitDefenderTheta	Gen:NN.ZemsilF.36680.Lm2@aSgN!0l
Symantec	Packed.Generic.619
Elastic	malicious (high confidence)
ESET-NOD32	a variant of MSIL/Kryptik.YXT
Cynet	Malicious (score: 100)
APEX	Malicious
Kaspersky	HEUR:Trojan-Spy.MSIL.Stealer.gen
BitDefender	IL:Trojan.MSILZilla.20187
NANO-Antivirus	Trojan.Win32.Stealer.ibwfie
Avast	Win32:MalwareX-gen [Trj]
Tencent	Win32.Trojan.FalseSign.Rnkl
Emsisoft	IL:Trojan.MSILZilla.20187 (B)
F-Secure	Heuristic.HEUR/AGEN.1304532
VIPRE	IL:Trojan.MSILZilla.20187
TrendMicro	TROJ_GEN.R06CC0DKA23
Sophos	Mal/Generic-S
Ikarus	Trojan-Spy.AgentTesla
Jiangmin	TrojanSpy.MSIL.banc
Webroot	W32.Malware.gen
Varist	W32/MSIL_Kryptik.CRP.gen!Eldorado
Avira	HEUR/AGEN.1304532
Kingsoft	malware.kb.c.1000
Microsoft	Trojan:MSIL/Stealer.PF!MTB
ZoneAlarm	HEUR:Trojan-Spy.MSIL.Stealer.gen
GData	IL:Trojan.MSILZilla.20187
Google	Detected
AhnLab-V3	Malware/Win32.RL_Generic.C4301767
VBA32	TScope.Trojan.MSIL
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R06CC0DKA23
Rising	Malware.Obfus/MSIL@AI.100 (RDM.MSIL2:y8ESLJq0P7e/ASAN23+ELA)
Yandex	Trojan.Kryptik!TWvLD8lkWgs
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.73709669.susgen
Fortinet	MSIL/Kryptik.YSD!tr
AVG	Win32:MalwareX-gen [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (W)