Trojan

Trojan:Win32/Redline.ASAA!MTB removal tips

Malware Removal

The Trojan:Win32/Redline.ASAA!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
DOWNLOAD NOW
6-day free trial available.

What Trojan:Win32/Redline.ASAA!MTB virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • CAPE extracted potentially suspicious content
  • Authenticode signature is invalid
  • CAPE detected the RedLine malware family
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Trojan:Win32/Redline.ASAA!MTB?



File Info:

name: C100FF6CFE6632735F90.mlw
path: /opt/CAPEv2/storage/binaries/2b9ee110ccc7e2133a1e44b4ff404b8df23ee983861696ec1e08756e1ff07337
crc32: 338BA111
md5: c100ff6cfe6632735f90e10d8f582a46
sha1: b08f2705d10933aceb53fec5c2d2d55fb1987267
sha256: 2b9ee110ccc7e2133a1e44b4ff404b8df23ee983861696ec1e08756e1ff07337
sha512: dc1a5dd3b32a89d8a70243e8b5b763be5ee2ef902393e8861e6091efcc829d99d60e93322bfa957fa4e87b805308d76b4b88b4932c7c763b4d7761f4eefd8499
ssdeep: 6144:mNk9X8Ow21TcmeIqOYt1XwZ6yWUrCd/JEAtgJeZD4YTR4XM:mNRmBqRXwZ6yKEAtgJaD/KXM
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T13F84F5B73E465CD3E7617E30AD610FB0D18C25EF4C76278A23D9C2525EB6AA84923D0D
sha3_384: 8e9a090a9f100dfa61ed4a46c2bc44148bba690329b8ef673f89973b15cc32205a7bfe8c79c00270fe366d9deeef5987
ep_bytes: e8e3250000e9a4feffff8bff558bec8b
timestamp: 2023-08-16 15:26:54


Version Info:

Comments: Hater limpid decorum
CompanyName: Exhilarate seekers
FileDescription: Rhombus loyal
FileVersion: 8.223.193.4
InternalName: Unwinds
LegalCopyright: Copyright © Efficacious slaloms grunted misnamed
LegalTrademarks: Transitive federate retching skiing allayed
OriginalFilename: Foregrounds
ProductName: Palladium
ProductVersion: 8.223.193.4
Translation: 0x081a 0x081a

Trojan:Win32/Redline.ASAA!MTB also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Agent.Y!c
Elasticmalicious (high confidence)
DrWebTrojan.PWS.RedLineNET.6
MicroWorld-eScanTrojan.GenericKD.68797379
FireEyeGeneric.mg.c100ff6cfe663273
ALYacTrojan.GenericKD.68797379
MalwarebytesSpyware.RedLineStealer
ZillyaTrojan.Stealer.Win32.138002
SangforTrojan.Win32.Save.a
K7AntiVirusRiskware ( 00584baa1 )
AlibabaTrojanSpy:Win32/Stealer.c67e3351
K7GWRiskware ( 00584baa1 )
CrowdStrikewin/malicious_confidence_100% (W)
BitDefenderThetaGen:NN.ZexaF.36662.yq0@aGzPyVpi
VirITTrojan.Win32.GenusT.DPVC
CyrenW32/Kryptik.KKK.gen!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Kryptik.HUKP
APEXMalicious
CynetMalicious (score: 100)
KasperskyHEUR:Trojan-Spy.Win32.Stealer.gen
BitDefenderTrojan.GenericKD.68797379
AvastWin32:PWSX-gen [Trj]
TencentMalware.Win32.Gencirc.13eca6f7
EmsisoftTrojan.GenericKD.68797379 (B)
F-SecureTrojan.TR/Crypt.XPACK.Gen5
VIPRETrojan.GenericKD.68797379
TrendMicroTROJ_GEN.R002C0DHI23
McAfee-GW-EditionArtemis!Trojan
Trapminemalicious.high.ml.score
SophosTroj/Steal-DQV
SentinelOneStatic AI – Malicious PE
AviraTR/Crypt.XPACK.Gen5
MAXmalware (ai score=86)
Antiy-AVLTrojan/Win32.Kryptik
MicrosoftTrojan:Win32/Redline.ASAA!MTB
ArcabitTrojan.Generic.D419C3C3
ViRobotTrojan.Win.Z.Kryptik.397824.H
ZoneAlarmHEUR:Trojan-Spy.Win32.Stealer.gen
GDataTrojan.GenericKD.68797379
GoogleDetected
AhnLab-V3Trojan/Win.RedLine.R599592
VBA32BScope.TrojanPSW.RedLine
TACHYONTrojan-Spy/W32.InfoStealer.397824.T
Cylanceunsafe
PandaTrj/Genetic.gen
TrendMicro-HouseCallTROJ_GEN.R002C0DHI23
RisingBackdoor.Agent!8.C5D (TFE:5:oMAOHc3z3iS)
IkarusTrojan.Agent
MaxSecureTrojan.Malware.73793603.susgen
FortinetW32/Kryptik.HUIM!tr
AVGWin32:PWSX-gen [Trj]
Cybereasonmalicious.5d1093
DeepInstinctMALICIOUS

How to remove Trojan:Win32/Redline.ASAA!MTB?

Trojan:Win32/Redline.ASAA!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • “Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

You may also like

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

View all posts

Leave a Comment