Trojan:Win32/Lokibot.ANRB!MTB information

The Trojan:Win32/Lokibot.ANRB!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/Lokibot.ANRB!MTB virus can do?

Behavioural detection: Executable code extraction – unpacking
Sample contains Overlay data
Reads data out of its own binary image
Authenticode signature is invalid

How to determine Trojan:Win32/Lokibot.ANRB!MTB?


File Info:
name: 7EE53FAA99A877B014F3.mlw
path: /opt/CAPEv2/storage/binaries/d102320cf8e7b2dd05385ac34f45037d744e408cfcd436352a9647f9cca60932
crc32: D8A252CE
md5: 7ee53faa99a877b014f3cc0b18fc42a2
sha1: 857df79442758d0e7cefc50f0d0de0d44c5c92aa
sha256: d102320cf8e7b2dd05385ac34f45037d744e408cfcd436352a9647f9cca60932
sha512: 73a682a308790ef42547e7b3320e0458a149757e2b7cb50ca269c7bd793ed98a6b8b28850b3944dacd26c428d2cf1ff274ee944d9beac3d97dcc191a4f21e507
ssdeep: 3072:l1NjcVVnLpPunbcTKpi6JVeXv4RyMes4tVMewjiS1KTQVGZ+LCMBwDKnUfdIsazK:HNeZmc28UBYjVMeixpVNCMBwIs45aNVn
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T13734120566A0E197F98B23F01C7D6B42ADFBBA162175934F4720EA48BC37BC1C909B57
sha3_384: 26ffbf94c5262facd4942e5d74ed59a5094c0250d8c6889e71fb47327619b327a55baf77c98012cbb848395f019f67f5
ep_bytes: 558bec81ecf40300005356576a205f33
timestamp: 2021-09-25 21:55:49

Version Info:
0: [No Data]

Trojan:Win32/Lokibot.ANRB!MTB also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Multi.Generic.4!c
MicroWorld-eScan	Trojan.Ransom.Loki.FPB
FireEye	Generic.mg.7ee53faa99a877b0
Skyhigh	BehavesLike.Win32.Generic.dc
McAfee	RDN/Generic PWS.y
Malwarebytes	Malware.AI.3976017812
VIPRE	Trojan.Ransom.Loki.FPB
Sangfor	Suspicious.Win32.Save.ins
K7AntiVirus	Trojan ( 005908231 )
BitDefender	Trojan.Ransom.Loki.FPB
K7GW	Trojan ( 005908231 )
Cybereason	malicious.442758
BitDefenderTheta	Gen:NN.ZexaF.36792.auW@ae5P1ubi
VirIT	Trojan.Win32.PSWStealer.EJ
Symantec	Trojan.Gen.2
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Injector.ERKE
APEX	Malicious
Kaspersky	HEUR:Trojan.Win32.Formbook.pef
Alibaba	Trojan:Win32/NSISInject.70edcc8b
NANO-Antivirus	Trojan.Win32.Formbook.jrnvdh
Rising	Trojan.Injector!8.C4 (TFE:2:3RbOxwABmYV)
Sophos	Mal/Generic-S
F-Secure	Heuristic.HEUR/AGEN.1352925
DrWeb	Trojan.Siggen17.34589
Zillya	Backdoor.Androm.Win32.80611
TrendMicro	TROJ_FRS.0NA103D522
Trapmine	malicious.moderate.ml.score
Emsisoft	Trojan.Ransom.Loki.FPB (B)
Ikarus	Trojan.Win32.Injector
MAX	malware (ai score=80)
Webroot	W32.Trojan.Gen
Google	Detected
Avira	HEUR/AGEN.1337929
Varist	W32/Trojan.QQUK-5462
Antiy-AVL	Trojan/Win32.Injector
Kingsoft	malware.kb.a.988
Microsoft	Trojan:Win32/Lokibot.ANRB!MTB
Xcitium	Malware@#2uv8t1buj6tgv
Arcabit	Trojan.Ransom.Loki.FPB
ZoneAlarm	HEUR:Backdoor.Win32.Androm.gen
GData	Trojan.Ransom.Loki.FPB
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.NSISInject.R487995
VBA32	BScope.Trojan.Formbook
ALYac	Trojan.Ransom.Loki.FPB
DeepInstinct	MALICIOUS
Cylance	unsafe
Panda	Trj/RnkBend.A
TrendMicro-HouseCall	TROJ_FRS.0NA103D522
Tencent	Win32.Trojan.Formbook.Rimw
Yandex	Trojan.Injector!TobwnMm0VEc
SentinelOne	Static AI – Malicious PE
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Injector.ERKP!tr
AVG	Win32:MalwareX-gen [Trj]
Avast	Win32:MalwareX-gen [Trj]
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Trojan:Win32/Lokibot.ANRB!MTB?

Trojan:Win32/Lokibot.ANRB!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X