Trojan

Trojan:Win32/Glupteba.B!MTB information

Malware Removal

The Trojan:Win32/Glupteba.B!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:Win32/Glupteba.B!MTB virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Unconventionial language used in binary resources: Russian
  • The binary contains an unknown PE section name indicative of packing
  • The binary likely contains encrypted or compressed data.
  • Authenticode signature is invalid

How to determine Trojan:Win32/Glupteba.B!MTB?


File Info:

name: 7DFD305CC21B2851CC51.mlw
path: /opt/CAPEv2/storage/binaries/433849d4632b2c851b50ed0a4f96a0e9da1ac237ce07963577bb915562d14396
crc32: 4ACC2025
md5: 7dfd305cc21b2851cc51e5bcfe9cdd63
sha1: bebb9f27abd1ae60d3357a01fe67dd92fa17f016
sha256: 433849d4632b2c851b50ed0a4f96a0e9da1ac237ce07963577bb915562d14396
sha512: c963483f99e9eef7a13e002e23392258cf53df406d8e28aa2915ccd464a8b75700201fab02b784182e8178917f847ae2689df61de3bb6b3a511f676290e93db8
ssdeep: 12288:i5N8SEEGB7+dLjmz0T6IWLJ60fc0VVO1ZndA6ni:AFE+cz86IcLfc0VITdAgi
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T132C4DF48B2F5CC99D0FACE31091AE3850AA7BD966D150A6F33A6130EACB1D596F74D30
sha3_384: fee1bfd2d1517d729060661f4dad1105f417b667d4e91a549caefe13d7ebc15d785490f7205b07916fd6a0f0f1708cdf
ep_bytes: 833d198f4200000f847e010000a1118f
timestamp: 2020-08-07 02:56:21

Version Info:

FileVersion: 7.2.1.1
LegalCopyright: Copyright © 2020
ProductVersion: 7.2.1.1
Translation: 0x0409 0x04b0

Trojan:Win32/Glupteba.B!MTB also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Kepiten.trmL
DrWebTrojan.SpyBot.961
MicroWorld-eScanGen:Variant.Razy.553929
FireEyeGeneric.mg.7dfd305cc21b2851
CAT-QuickHealTrojan.IgenericRI.S12473364
SkyhighBehavesLike.Win32.Dropper.hc
McAfeeGenericRXHS-AA!7DFD305CC21B
Cylanceunsafe
ZillyaTrojan.Glupteba.Win32.25947
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan ( 0056559e1 )
AlibabaTrojan:Win32/Glupteba.11b
K7GWTrojan ( 0056559e1 )
Cybereasonmalicious.7abd1a
BitDefenderThetaAI:Packer.FDD8E7721F
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Glupteba.BC
APEXMalicious
CynetMalicious (score: 100)
KasperskyTrojan.Win32.Kepiten.a
BitDefenderGen:Variant.Razy.553929
NANO-AntivirusTrojan.Win32.Kepiten.hqvotb
SUPERAntiSpywareTrojan.Agent/Gen-Glupteba
AvastWin32:TrojanX-gen [Trj]
TencentMalware.Win32.Gencirc.10b49610
EmsisoftGen:Variant.Razy.553929 (B)
F-SecureTrojan.TR/Crypt.XPACK.Gen2
VIPREGen:Variant.Razy.553929
SophosTroj/Glupteba-M
IkarusTrojan.Win32.Glupteba
JiangminTrojan.Kepiten.a
WebrootW32.Trojan.Gen
GoogleDetected
AviraTR/Crypt.XPACK.Gen2
Antiy-AVLTrojan/Win32.Glupteba
Kingsoftmalware.kb.a.1000
MicrosoftTrojan:Win32/Glupteba.B!MTB
XcitiumMalware@#dndjeg7wgckd
ArcabitTrojan.Razy.D873C9
ZoneAlarmTrojan.Win32.Kepiten.a
GDataWin32.Trojan.PSE.FPK76K
VaristW32/S-3ebf0797!Eldorado
AhnLab-V3Malware/Win32.Generic.R332075
VBA32BScope.TrojanProxy.Glupteba
ALYacGen:Variant.Razy.553929
MAXmalware (ai score=88)
MalwarebytesTrojan.Glupteba
PandaTrj/Genetic.gen
RisingTrojan.Glupteba!1.BC88 (CLASSIC)
SentinelOneStatic AI – Suspicious PE
MaxSecureTrojan.Malware.101080455.susgen
FortinetW32/Glupteba.B!tr
AVGWin32:TrojanX-gen [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_90% (D)

How to remove Trojan:Win32/Glupteba.B!MTB?

Trojan:Win32/Glupteba.B!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment