Trojan

Trojan:Win32/MetaStealer.NA!MTB malicious file

Malware Removal

The Trojan:Win32/MetaStealer.NA!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:Win32/MetaStealer.NA!MTB virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • CAPE extracted potentially suspicious content
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • CAPE detected the MetaStealer malware family
  • Yara detections observed in process dumps, payloads or dropped files

How to determine Trojan:Win32/MetaStealer.NA!MTB?


File Info:

name: 4A12A0C40EFAC8330C19.mlw
path: /opt/CAPEv2/storage/binaries/4e6360f37334c15f9dfa4140889eda6d6664430b0b88cf9472912d2cedf03a11
crc32: 962949B6
md5: 4a12a0c40efac8330c1992b1c5d3223b
sha1: 55d23df3a88c79d3bdd42ca410148f622a2b4fee
sha256: 4e6360f37334c15f9dfa4140889eda6d6664430b0b88cf9472912d2cedf03a11
sha512: 3c12a95bbe432e558cb8257ebacc76e6cc10d5fc080bf58a21d6f8b800795fb6609ddf57df4f564b49abf7a6aa371790d32feb35dc5845be4afe61a425fb7990
ssdeep: 6144:7RmApEI8xLjz2DM3U992E2UlZOHHBoSUf:7RrOIUODMk9IueoSq
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T1CD948C21C4A78777F253B837AEA1EC471176F9933A330572AE8D09F9C6660E01369F58
sha3_384: ec47fbfd72fec59167fd722f123748b0f73934002ffd37b2356053a3e1adfcea779284c53d441f306be93ad8cb086ac1
ep_bytes: e8f5020000e974feffff836104008bc1
timestamp: 2024-02-04 20:15:01

Version Info:

0: [No Data]

Trojan:Win32/MetaStealer.NA!MTB also known as:

LionicTrojan.Win32.Reline.i!c
Elasticmalicious (high confidence)
DrWebTrojan.PWS.Stealer.38294
MicroWorld-eScanTrojan.GenericKD.71515512
FireEyeGeneric.mg.4a12a0c40efac833
CAT-QuickHealTrojan.Stealc
SkyhighBehavesLike.Win32.Generic.gm
McAfeeArtemis!4A12A0C40EFA
Cylanceunsafe
VIPRETrojan.GenericKD.71515512
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
BitDefenderTrojan.GenericKD.71515512
K7GWTrojan ( 005b1a951 )
K7AntiVirusTrojan ( 005b1a951 )
BitDefenderThetaGen:NN.ZexaF.36744.zuW@aengQZd
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.HWGO
APEXMalicious
CynetMalicious (score: 100)
KasperskyHEUR:Trojan-PSW.Win32.Reline.gen
AlibabaTrojanPSW:Win32/StealC.4ae73e35
NANO-AntivirusTrojan.Win32.Reline.kipjck
RisingTrojan.Generic@AI.100 (RDML:J+upPC1CfWo81UTN3AwY8g)
TACHYONTrojan-PWS/W32.Reline.417280
SophosMal/Generic-S
TrendMicroTrojanSpy.Win32.REDLINE.YXEBEZ
Trapminemalicious.moderate.ml.score
EmsisoftTrojan.GenericKD.71515512 (B)
IkarusTrojan.Agent
GDataTrojan.GenericKD.71515512
GoogleDetected
Antiy-AVLTrojan/Win32.Kryptik
KingsoftWin32.Trojan-PSW.Reline.gen
ArcabitTrojan.Generic.D4433D78
ZoneAlarmHEUR:Trojan-PSW.Win32.Reline.gen
MicrosoftTrojan:Win32/MetaStealer.NA!MTB
VaristW32/Agent.IHM.gen!Eldorado
AhnLab-V3Malware/Win.AGEN.R633930
ALYacTrojan.GenericKD.71515512
MAXmalware (ai score=100)
DeepInstinctMALICIOUS
MalwarebytesTrojan.MalPack
PandaTrj/Chgt.AD
TrendMicro-HouseCallTrojanSpy.Win32.REDLINE.YXEBEZ
TencentMalware.Win32.Gencirc.140017f2
YandexTrojan.Kryptik!mpf/nm6rgKk
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.121218.susgen
FortinetW32/Kryptik.FTKT!tr
AVGWin32:TrojanX-gen [Trj]
Cybereasonmalicious.3a88c7
AvastWin32:TrojanX-gen [Trj]

How to remove Trojan:Win32/MetaStealer.NA!MTB?

Trojan:Win32/MetaStealer.NA!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment