Trojan

Trojan:Win32/NSISInject.FB!MTB (file analysis)

Malware Removal

The Trojan:Win32/NSISInject.FB!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Trojan:Win32/NSISInject.FB!MTB virus can do?

  • SetUnhandledExceptionFilter detected (possible anti-debug)
  • Behavioural detection: Executable code extraction – unpacking
  • At least one process apparently crashed during execution
  • Creates RWX memory
  • Dynamic (imported) function loading detected
  • Authenticode signature is invalid

How to determine Trojan:Win32/NSISInject.FB!MTB?



File Info:

name: 7BAC72765F59774AF369.mlw
path: /opt/CAPEv2/storage/binaries/41e4e99a7e018c42f87316a684fe32bbdfdbba1211e37c5ae2a888954b1b8404
crc32: 491645C7
md5: 7bac72765f59774af369b8097b7e498b
sha1: 5697ff90f7be29f7572c9ece6734f83f29966fba
sha256: 41e4e99a7e018c42f87316a684fe32bbdfdbba1211e37c5ae2a888954b1b8404
sha512: 4cf3e6bc8a46518e1f65b13bc336a8b06f7b3a0e623e30ca23341d69dec070e0608a5c74d9c5a9dc29eaa80ad132b4599d9046ee2b9644dfb731030085bba713
ssdeep: 1536:vbtbZUR/k9otTbwrvvszBxvAlLKIlVo9aQG5SSfsu0DsuROAHOnBs2u2vkyi9aZj:vpb0s9AkrGxvelu9doaIqbLxovrVmul
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1BBD35B0174D98030E2B7427B4568E6520A7EFD764E329E9F2BDC4D8D1AB84D0A736B73
sha3_384: 2d3b95d162ff6a8089f12173f9f877eed3668d747facac0d9c28803a3b6a445c4f8e0c518d8f0635d046eae31751f10f
ep_bytes: e88a2e0000e939feffff558becff15a8
timestamp: 2022-05-12 23:01:55


Version Info:

0: [No Data]

Trojan:Win32/NSISInject.FB!MTB also known as:

BkavW32.AIDetect.malware2
LionicTrojan.Win32.Inject.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKD.39667174
FireEyeTrojan.GenericKD.39667174
CAT-QuickHealTrojan.GenericPMF.S28091415
ALYacTrojan.GenericKD.39667174
MalwarebytesTrojan.Injector
ZillyaTrojan.Injector.Win32.1536233
SangforTrojan.Win32.Injector.Vmek
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:Win32/NSISInject.dc72ac92
K7GWTrojan ( 005945061 )
K7AntiVirusTrojan ( 005945061 )
BitDefenderThetaGen:NN.ZexaF.34582.iqW@aS9dxnf
VirITTrojan.Win32.PSWStealer.EK
CyrenW32/Injector.AXL.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Injector.ERPY
TrendMicro-HouseCallTrojan.Win32.NSISINJECT.USASHEJ22
Paloaltogeneric.ml
KasperskyVHO:Trojan.Win32.Convagent.gen
BitDefenderTrojan.GenericKD.39667174
AvastWin32:InjectorX-gen [Trj]
Ad-AwareTrojan.GenericKD.39667174
EmsisoftTrojan.GenericKD.39667174 (B)
ComodoMalware@#1dess1i839mn8
VIPRETrojan.GenericKD.39667174
TrendMicroTrojan.Win32.NSISINJECT.USASHEJ22
McAfee-GW-EditionBehavesLike.Win32.NetLoader.ch
SophosMal/Generic-S + Troj/Inject-HSG
IkarusTrojan-Spy.Agent
WebrootW32.Injector.Gen
AviraTR/Injector.tnxui
Antiy-AVLTrojan/Generic.ASMalwS.51F4
MicrosoftTrojan:Win32/NSISInject.FB!MTB
ZoneAlarmVHO:Trojan.Win32.Convagent.gen
GDataTrojan.GenericKD.39667174
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win.FormBook.R492181
McAfeeRDN/Generic.grp
MAXmalware (ai score=84)
VBA32Trojan.Wacatac
APEXMalicious
RisingTrojan.Generic@AI.96 (RDML:I9Aaa9+MxD+1+focjwz2Ug)
YandexTrojan.Igent.bXZDPp.2
SentinelOneStatic AI – Suspicious PE
FortinetW32/Injector.EROK!tr
AVGWin32:InjectorX-gen [Trj]
Cybereasonmalicious.0f7be2
PandaTrj/GdSda.A

How to remove Trojan:Win32/NSISInject.FB!MTB?

Trojan:Win32/NSISInject.FB!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment