About “Trojan:Win32/Redline.ASAX!MTB” infection

The Trojan:Win32/Redline.ASAX!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/Redline.ASAX!MTB virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Trojan:Win32/Redline.ASAX!MTB?


File Info:
name: FB299E9EB7C08222162E.mlw
path: /opt/CAPEv2/storage/binaries/a0e4826a13ca7a306699891133c2a8ed2ca23125dbea3bddf68975a1caa178a4
crc32: A27E700B
md5: fb299e9eb7c08222162e081fde3beac7
sha1: e2d22ab68f6e8fb702c4737b9dc943c2c5e09e0f
sha256: a0e4826a13ca7a306699891133c2a8ed2ca23125dbea3bddf68975a1caa178a4
sha512: 1593acce08eb781fb496a05d5011c48bb1b127391b10200b045122cbb129ffe23451e1aa2968b9f33bbfff6d2b7110b1cd27fe6b03142584ab43f1a4612ace9f
ssdeep: 6144:Ll+7jb0Hb2BVv5fh3zOiePwg5o9oEDoXamj8:Ll+7jKb4Vv5fpzOiePwGIh
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1DD447C01B9808037CB7338710675E7B789EDC4342B4462DF47AD59B6BF64BC1A63A26E
sha3_384: 5e4109e8912483a0fa1358398fc024d14e977f4b945746c7335d458c5b68d081bb6bd77edb26214580530574750ef62d
ep_bytes: e83f040000e917feffff3b0d10704500
timestamp: 2023-10-02 10:08:05

Version Info:
0: [No Data]

Trojan:Win32/Redline.ASAX!MTB also known as:

Bkav	W32.AIDetectMalware
Skyhigh	Artemis!Trojan
Malwarebytes	Malware.AI.894859492
CrowdStrike	win/malicious_confidence_60% (W)
Cynet	Malicious (score: 100)
APEX	Malicious
Alibaba	Trojan:Win32/Redline.363b73c1
NANO-Antivirus	Trojan.Win32.TrjGen.kbuaax
DrWeb	Trojan.Siggen21.35873
Zillya	Trojan.Agent.Win32.3727463
Ikarus	Trojan.Win32.Redline
Microsoft	Trojan:Win32/Redline.ASAX!MTB
Google	Detected
DeepInstinct	MALICIOUS
TrendMicro-HouseCall	TROJ_GEN.R002H01J423
Rising	Trojan.Generic@AI.100 (RDML:kM2buJOLC1KhfrC/m4TlJg)
MaxSecure	Trojan.Malware.218791683.susgen
Fortinet	W32/Kryptik.HUTD!tr
Cybereason	malicious.68f6e8

How to remove Trojan:Win32/Redline.ASAX!MTB?

Trojan:Win32/Redline.ASAX!MTB removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X