Categories: Trojan

Trojan:Win32/NSISInject.FB!MTB (file analysis)

The Trojan:Win32/NSISInject.FB!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/NSISInject.FB!MTB virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Behavioural detection: Executable code extraction – unpacking
At least one process apparently crashed during execution
Creates RWX memory
Dynamic (imported) function loading detected
Authenticode signature is invalid

How to determine Trojan:Win32/NSISInject.FB!MTB?


File Info:
name: 7BAC72765F59774AF369.mlwpath: /opt/CAPEv2/storage/binaries/41e4e99a7e018c42f87316a684fe32bbdfdbba1211e37c5ae2a888954b1b8404crc32: 491645C7md5: 7bac72765f59774af369b8097b7e498bsha1: 5697ff90f7be29f7572c9ece6734f83f29966fbasha256: 41e4e99a7e018c42f87316a684fe32bbdfdbba1211e37c5ae2a888954b1b8404sha512: 4cf3e6bc8a46518e1f65b13bc336a8b06f7b3a0e623e30ca23341d69dec070e0608a5c74d9c5a9dc29eaa80ad132b4599d9046ee2b9644dfb731030085bba713ssdeep: 1536:vbtbZUR/k9otTbwrvvszBxvAlLKIlVo9aQG5SSfsu0DsuROAHOnBs2u2vkyi9aZj:vpb0s9AkrGxvelu9doaIqbLxovrVmultype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1BBD35B0174D98030E2B7427B4568E6520A7EFD764E329E9F2BDC4D8D1AB84D0A736B73sha3_384: 2d3b95d162ff6a8089f12173f9f877eed3668d747facac0d9c28803a3b6a445c4f8e0c518d8f0635d046eae31751f10fep_bytes: e88a2e0000e939feffff558becff15a8timestamp: 2022-05-12 23:01:55
Version Info:
0: [No Data]

Trojan:Win32/NSISInject.FB!MTB also known as:

Bkav	W32.AIDetect.malware2
Lionic	Trojan.Win32.Inject.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.39667174
FireEye	Trojan.GenericKD.39667174
CAT-QuickHeal	Trojan.GenericPMF.S28091415
ALYac	Trojan.GenericKD.39667174
Malwarebytes	Trojan.Injector
Zillya	Trojan.Injector.Win32.1536233
Sangfor	Trojan.Win32.Injector.Vmek
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Trojan:Win32/NSISInject.dc72ac92
K7GW	Trojan ( 005945061 )
K7AntiVirus	Trojan ( 005945061 )
BitDefenderTheta	Gen:NN.ZexaF.34582.iqW@aS9dxnf
VirIT	Trojan.Win32.PSWStealer.EK
Cyren	W32/Injector.AXL.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Injector.ERPY
TrendMicro-HouseCall	Trojan.Win32.NSISINJECT.USASHEJ22
Paloalto	generic.ml
Kaspersky	VHO:Trojan.Win32.Convagent.gen
BitDefender	Trojan.GenericKD.39667174
Avast	Win32:InjectorX-gen [Trj]
Ad-Aware	Trojan.GenericKD.39667174
Emsisoft	Trojan.GenericKD.39667174 (B)
Comodo	Malware@#1dess1i839mn8
VIPRE	Trojan.GenericKD.39667174
TrendMicro	Trojan.Win32.NSISINJECT.USASHEJ22
McAfee-GW-Edition	BehavesLike.Win32.NetLoader.ch
Sophos	Mal/Generic-S + Troj/Inject-HSG
Ikarus	Trojan-Spy.Agent
Webroot	W32.Injector.Gen
Avira	TR/Injector.tnxui
Antiy-AVL	Trojan/Generic.ASMalwS.51F4
Microsoft	Trojan:Win32/NSISInject.FB!MTB
ZoneAlarm	VHO:Trojan.Win32.Convagent.gen
GData	Trojan.GenericKD.39667174
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.FormBook.R492181
McAfee	RDN/Generic.grp
MAX	malware (ai score=84)
VBA32	Trojan.Wacatac
APEX	Malicious
Rising	Trojan.Generic@AI.96 (RDML:I9Aaa9+MxD+1+focjwz2Ug)
Yandex	Trojan.Igent.bXZDPp.2
SentinelOne	Static AI – Suspicious PE
Fortinet	W32/Injector.EROK!tr
AVG	Win32:InjectorX-gen [Trj]
Cybereason	malicious.0f7be2
Panda	Trj/GdSda.A