Trojan:Win32/OffLoader.ASQ!MTB (file analysis)

The Trojan:Win32/OffLoader.ASQ!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/OffLoader.ASQ!MTB virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Sample contains Overlay data
• Reads data out of its own binary image
• Drops a binary and executes it
• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid

How to determine Trojan:Win32/OffLoader.ASQ!MTB?

File Info:
name: F6C4617C2C2AB6E055EF.mlw
path: /opt/CAPEv2/storage/binaries/944064ce1abbd971c9d95d214c5f7bf400b426abf2cb171f5c81af59ddd45dab
crc32: 5571987A
md5: f6c4617c2c2ab6e055efaa1477ce28f9
sha1: 4c3f08700c6791d2dc9b58a2f2866713524c2bce
sha256: 944064ce1abbd971c9d95d214c5f7bf400b426abf2cb171f5c81af59ddd45dab
sha512: db1559efeb0de12c3dfdb1f9dae806d68bef5b23682a75e1c625d4dba7056d2a9225c37fc43d470c6101e18da87c953a14dba5d1d088177887594f0419aa2bfe
ssdeep: 24576:s7FUDowAyrTVE3U5F/uWarKic6QL3E2vVsjECUAQT45deRV9R0:sBuZrEUHarKIy029s4C1eH9S
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T19A75BF3FF268A13EC56A1B3245B38310997BBA61B81A8C1E47FC344DCF765601E3B656
sha3_384: 7547c2b07bc5a0355eae917bb71282d392044afb59b38e3fc869797712eef0e93dd94a81f030eb00e56325e291814072
ep_bytes: 558bec83c4a453565733c08945c48945
timestamp: 2023-02-15 14:54:16

Version Info:
Comments: This installation was built with Inno Setup.
CompanyName:                                                             
FileDescription: FlipWitch  Forbidden Sex Hex Final By MomoGames  Critical Bl
FileVersion:                     
LegalCopyright:                                                                                                     
OriginalFileName:                                                   
ProductName: FlipWitch  Forbidden Sex Hex Final By MomoGames  Critical Bl
ProductVersion: 2.5                                               
Translation: 0x0000 0x04b0

Trojan:Win32/OffLoader.ASQ!MTB also known as:

How to remove Trojan:Win32/OffLoader.ASQ!MTB?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.