Categories: SpyTrojan

TrojanSpy:Win32/Stelega.MT!MTB malicious file

The TrojanSpy:Win32/Stelega.MT!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanSpy:Win32/Stelega.MT!MTB virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
A process created a hidden window
Uses Windows utilities for basic functionality
Creates a slightly modified copy of itself

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine TrojanSpy:Win32/Stelega.MT!MTB?


File Info:
crc32: 68CEBA34md5: fb91b090c9950074817bd77f1c87c56aname: FB91B090C9950074817BD77F1C87C56A.mlwsha1: 99ee2557eec53fae546692c3c9054e3a30073ea8sha256: 84687e579d6c4ef7561c3214eb1bd48c06de4bbfda04cf3c9fb68a5caac3b63fsha512: 2ba0b91561363c23f5e8b4703b93b25a93177faeb367b012e79c7f31bd72d6956ec7e4d506e514c74125d857c766470810ced5f3f98ace1a62bc3090ed9fd0eessdeep: 12288:g6E5nLaUa4hSXtNGmEEFYj1tAWIjpR8LRFTRICBNpA9c+e:4E4hSXtUBEFYZqxpR4/tA9c+type: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

TrojanSpy:Win32/Stelega.MT!MTB also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.44516245
CAT-QuickHeal	Trojan.Injects
ALYac	Trojan.GenericKD.44516245
Cylance	Unsafe
Zillya	Trojan.Kryptik.Win32.2727242
Sangfor	Malware
K7AntiVirus	Trojan ( 005744931 )
BitDefender	Trojan.GenericKD.44516245
K7GW	Trojan ( 005744931 )
Cybereason	malicious.0c9950
Arcabit	Trojan.Generic.D2A74395
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Kryptik.HHVD
APEX	Malicious
Paloalto	generic.ml
Kaspersky	HEUR:Trojan.Win32.Injects.gen
Alibaba	TrojanSpy:Win32/Stelega.30424272
NANO-Antivirus	Trojan.Win32.Injects.ideqzb
ViRobot	Trojan.Win32.Z.Agent.658452
Rising	Trojan.Kryptik!8.8 (TFE:5:XEPtmt8CWCD)
Ad-Aware	Trojan.GenericKD.44516245
Sophos	Mal/Generic-S
F-Secure	Trojan.TR/Crypt.Agent.zfpja
DrWeb	Trojan.FakeAV.20542
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_GEN.R002C0DL820
McAfee-GW-Edition	BehavesLike.Win32.Generic.jc
FireEye	Generic.mg.fb91b090c9950074
Emsisoft	Trojan.GenericKD.44516245 (B)
Ikarus	Trojan.Inject
Avira	TR/Crypt.Agent.zfpja
Antiy-AVL	Trojan/Win32.Kryptik
Kingsoft	Win32.Troj.Undef.(kcloud)
Gridinsoft	Trojan.Win32.Downloader.oa
Microsoft	TrojanSpy:Win32/Stelega.MT!MTB
AegisLab	Trojan.Win32.Injects.4!c
ZoneAlarm	HEUR:Trojan.Win32.Injects.gen
GData	Trojan.GenericKD.44516245
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.Kryptik.C4227783
McAfee	RDN/Generic PWS.y
MAX	malware (ai score=84)
VBA32	BScope.Trojan.Glupteba
Malwarebytes	Trojan.MalPack.RND.Generic
Panda	Trj/CI.A
TrendMicro-HouseCall	TROJ_GEN.R002C0DL820
Tencent	Malware.Win32.Gencirc.11b3627a
Yandex	Trojan.Injects!84Xz7oHhZUI
SentinelOne	Static AI – Malicious PE
eGambit	Unsafe.AI_Score_92%
Fortinet	W32/GenKryptik.EWNO!tr
BitDefenderTheta	Gen:NN.ZexaF.34700.OuZ@aW!uc8hi
AVG	Win32:MalwareX-gen [Trj]
Avast	Win32:MalwareX-gen [Trj]
CrowdStrike	win/malicious_confidence_80% (D)