Trojan:Win32/Sabsik.EN.B!ml information

The Trojan:Win32/Sabsik.EN.B!ml is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Trojan:Win32/Sabsik.EN.B!ml virus can do?

Authenticode signature is invalid
Anomalous binary characteristics
Binary compilation timestomping detected

How to determine Trojan:Win32/Sabsik.EN.B!ml?


File Info:
name: 4B8E6B7D9116898AC768.mlw
path: /opt/CAPEv2/storage/binaries/40a4e36a1ac8dc142b97f0bb862f68c43041f133718c6002781b2d7f5e4abf4a
crc32: AB67DDD6
md5: 4b8e6b7d9116898ac76886441b00eb1b
sha1: a0ba4905784cf6652bc2951d02d5434154fdc743
sha256: 40a4e36a1ac8dc142b97f0bb862f68c43041f133718c6002781b2d7f5e4abf4a
sha512: b8fe15effcd15a1f412ccef7c32ead6422e7d1956c87ab69fa91a469ccf6f78b9266a457c9e2e36015a7983323edf839b81773d0530dc59799e315817fc10c79
ssdeep: 98304:x1rRokjhv7StsTJdXN0B7+sitLK3BDhtvS0Hpe4zbpaAKQkroGIEUbYZfgs0Qlxd:eSvUvBnvjeApaAvktlU64sN
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T138C69D4277F440F5E1B6D230C9668376E6B2BC695D31D70F1690D61E2F337A28E2A326
sha3_384: b0e9eb96de21c0e34d9f6e1db3722573ea7b791fabac1ed84ed5d048a2a9df47dbb87c497580a048d1954f2274123f48
ep_bytes: 0fc1ca21e8e8000000005a0fbfcaeb01
timestamp: 2033-07-16 10:41:46

Version Info:
0: [No Data]

Trojan:Win32/Sabsik.EN.B!ml also known as:

tehtris	Generic.Malware
MicroWorld-eScan	Gen:Variant.Application.Application.Razy.449184
ALYac	Gen:Variant.Application.Application.Razy.449184
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Riskware ( 0055e3f21 )
K7GW	Riskware ( 0055e3f21 )
Cybereason	malicious.d91168
BitDefenderTheta	Gen:NN.ZexaF.34606.@hZ@aiRFpml
Cyren	W32/Agent.EF.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	Win32/RiskWare.PEMalform.F
TrendMicro-HouseCall	TROJ_GEN.R03BC0PDM22
BitDefender	Gen:Variant.Application.Application.Razy.449184
NANO-Antivirus	Trojan.Win32.Crypted.cxsujh
Avast	Win32:Malware-gen
Ad-Aware	Gen:Variant.Application.Application.Razy.449184
Emsisoft	Gen:Variant.Application.Application.Razy.449184 (B)
Zillya	Tool.PEMalform.Win32.171
TrendMicro	TROJ_GEN.R03BC0PDM22
McAfee-GW-Edition	BehavesLike.Win32.Backdoor.wh
FireEye	Generic.mg.4b8e6b7d9116898a
Sophos	ML/PE-A
SentinelOne	Static AI – Malicious PE
GData	Gen:Variant.Application.Application.Razy.449184
Avira	TR/ATRAPS.Gen2
MAX	malware (ai score=74)
Antiy-AVL	Trojan/Generic.ASMalwS.847221
Arcabit	Trojan.Application.Application.Razy.D6DAA0
Microsoft	Trojan:Win32/Sabsik.EN.B!ml
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.LdPinch.R28809
Acronis	suspicious
McAfee	GenericRXFR-AR!4B8E6B7D9116
Malwarebytes	Malware.AI.4216924674
APEX	Malicious
Rising	Hacktool.PEMalform!8.13289 (RDMK:cmRtazrqsOA8L04+6v/u3sEzJddm)
Yandex	RiskWare.PEMalform!zwe7ER+Lj1c
Ikarus	Trojan.Win32.Genome
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	Riskware/PEMalform
AVG	Win32:Malware-gen
CrowdStrike	win/malicious_confidence_100% (W)

How to remove Trojan:Win32/Sabsik.EN.B!ml?

Trojan:Win32/Sabsik.EN.B!ml removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X