Trojan:Win32/OffLoader.GPC!MTB malicious file

The Trojan:Win32/OffLoader.GPC!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/OffLoader.GPC!MTB virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Sample contains Overlay data
• Uses Windows utilities for basic functionality
• Performs HTTP requests potentially not found in PCAP.
• Reads data out of its own binary image
• Authenticode signature is invalid
• Behavioural detection: Injection (inter-process)
• Attempts to modify proxy settings
• Deletes executed files from disk
• Touches a file containing cookies, possibly for information gathering

How to determine Trojan:Win32/OffLoader.GPC!MTB?

File Info:
name: A662CF384930431D8D84.mlw
path: /opt/CAPEv2/storage/binaries/7b81a031340c231676dbc02b85ce4dda6097e6c2c564f74c18edaa8896bbf365
crc32: 30969558
md5: a662cf384930431d8d84b38ae0b03dce
sha1: a1178582754bb7a8aef42de01cac8b895c6b14ed
sha256: 7b81a031340c231676dbc02b85ce4dda6097e6c2c564f74c18edaa8896bbf365
sha512: 2306454d541b5240b3a8d1e6755eb8462e99120aebad52398e1c506b0ab9bc7b81d775bbe345627eb8e5cc849e556f874e4b81406192bc256f1336b0c659fb08
ssdeep: 196608:D2iYq5pjxAwA/THcNwTAlAWzN+PpC6UQJlU/rnsfx+KNZeYez8aQHD2peix0:DvTtxAwAb8NwT1I+Z7inI+sZh/HKpR0
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D3B63306E2A7CE45FDB814BD58B495760E3ABC41D970C79327E63FAE78F8107845223A
sha3_384: b274f079d1bf3036df30ec74a7dd6706fb42b73f9424e84703f3f357d3e3186877765c6a167d0dc3e04a1d63a5ffd63b
ep_bytes: 81ecf80300005556576a205f33ed6801
timestamp: 2023-07-02 02:09:48

Version Info:
0: [No Data]

Trojan:Win32/OffLoader.GPC!MTB also known as:

How to remove Trojan:Win32/OffLoader.GPC!MTB?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.