Categories: Trojan

How to remove “Trojan:Win32/Azorult.RFA!MTB”?

The Trojan:Win32/Azorult.RFA!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/Azorult.RFA!MTB virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Behavioural detection: Executable code extraction – unpacking
Yara rule detections observed from a process memory dump/dropped files/CAPE
Creates RWX memory
Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Authenticode signature is invalid
Collects information to fingerprint the system

How to determine Trojan:Win32/Azorult.RFA!MTB?


File Info:
name: BFE76785C9F85BAD141E.mlwpath: /opt/CAPEv2/storage/binaries/1daf637340b8a169ecea3ca8ebd32234bac6aea1152c32001b49b1594fee5197crc32: E8D9CA45md5: bfe76785c9f85bad141e7e80624aed3csha1: 73d8a841d71c7b03e2099c2c1d0cf9c4be8cecb5sha256: 1daf637340b8a169ecea3ca8ebd32234bac6aea1152c32001b49b1594fee5197sha512: 21f426f71601e2d74c946c5cce83f79d994a97af5df31201ea6ceb2c725001ac2c357955389812fd6fd6c724bef87418090d057d49f711c91f2c2aae1581cd18ssdeep: 1536:27ax3H4XLAUDaiWDpNOPNDK0yxDbP8k2spVFy73PWJ5+TeEJc7xcV7Ej:SgHIL0T06bELsHFyLU5meECWptype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1FB14BE217D9CC472D6A396705426C3B06A3AB8723A708D473795176EDF313E2AF7A306sha3_384: 0e0fa033dda243a83ee3698f117b96000728ac5fdd38fb7fa330b2d03dc7deba17b844f46b191ff7e40a03cacc26412eep_bytes: e89d2e0000e979feffff8bff558bec8btimestamp: 2021-09-05 03:05:11
Version Info:
FileVersion: 21.79.127.9Copyrighz: Copyrighz (C) 2022, fuzkorteTranslations: 0x0116 0x00d3

Trojan:Win32/Azorult.RFA!MTB also known as:

Bkav	W32.AIDetect.malware1
Lionic	Trojan.Win32.Strab.4!c
tehtris	Generic.Malware
DrWeb	Trojan.Siggen17.19930
CAT-QuickHeal	Trojan.AzorultPMF.S26916072
McAfee	Packed-GDT!BFE76785C9F8
Malwarebytes	Trojan.MalPack.GS
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
BitDefender	Trojan.GenericKDZ.84631
K7GW	Trojan ( 0058f1bc1 )
K7AntiVirus	Trojan ( 0058f1bc1 )
Cyren	W32/Kryptik.EYC.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Kryptik.HOQK
APEX	Malicious
Paloalto	generic.ml
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Trojan.Win32.Strab.gen
Alibaba	Trojan:Win32/Azorult.e885f5b7
NANO-Antivirus	Trojan.Win32.Mokes.jmsoqx
MicroWorld-eScan	Trojan.GenericKDZ.84631
Tencent	Win32.Trojan.Strab.Plkp
Ad-Aware	Trojan.GenericKDZ.84631
Sophos	Mal/Generic-S + Mal/Agent-AWV
Comodo	Malware@#3k462vf9nrxg1
Zillya	Trojan.Kryptik.Win32.3718759
TrendMicro	TROJ_GEN.R06CC0DCF22
McAfee-GW-Edition	Packed-GDT!BFE76785C9F8
FireEye	Generic.mg.bfe76785c9f85bad
Emsisoft	Trojan.Crypt (A)
SentinelOne	Static AI – Malicious PE
Jiangmin	Backdoor.Mokes.fje
Webroot	W32.Trojan.Gen
Avira	TR/AD.PhobosRansom.wsqdx
MAX	malware (ai score=84)
Microsoft	Trojan:Win32/Azorult.RFA!MTB
Arcabit	Trojan.Generic.D14A97
GData	Win32.Trojan.Kryptik.SE
VBA32	Trojan.Agent
ALYac	Trojan.GenericKDZ.84631
Cylance	Unsafe
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R06CC0DCF22
Rising	Trojan.Kryptik!1.DC53 (CLOUD)
Ikarus	Trojan.Win32.Azorult
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/FilecoderPhobos.F!tr.ransom
AVG	Win32:AceCrypter-K [Cryp]
Cybereason	malicious.1d71c7
Avast	Win32:AceCrypter-K [Cryp]