Spy Trojan

Trojan:Win32/Spysnake.MAB!MTB (file analysis)

Malware Removal

The Trojan:Win32/Spysnake.MAB!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Trojan:Win32/Spysnake.MAB!MTB virus can do?

  • Authenticode signature is invalid

How to determine Trojan:Win32/Spysnake.MAB!MTB?


File Info:

name: A46B4C88398F7B00B20C.mlw
path: /opt/CAPEv2/storage/binaries/740abfe8ee1a2f216c226e51bb5233b38b701dc7f978ae0ffc3c6d0a2cf712fe
crc32: 25AFF552
md5: a46b4c88398f7b00b20c49a44a48c052
sha1: 34ae7e6dbb9379d5c80c1a9327d9b7451c2c8b11
sha256: 740abfe8ee1a2f216c226e51bb5233b38b701dc7f978ae0ffc3c6d0a2cf712fe
sha512: daa99c839846889c6c05a88d7f89bb68e6ea183a3941e8f533efc6206a190577de85079140f4d9bc990b5db07dc9a1b9dfe2d94c4df3c6c74aafedd2f99114dd
ssdeep: 96:YxZQBaABSEy5MiFLqNPtboyn9Zi3LBf7dCczVq:pB/BfOvFL6P1oynnmL+c
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T18FC1D84357100CE3E7498FFA66734D9C4A3899551B5119EB03638D9E48E87C2B4367DF
sha3_384: 06a9c664e10b65828a73f14abfa85ec495abda0e8409669a5d51e7c91b7b3c6f3ea292362ac0fed2885c14372f512e74
ep_bytes: 558bec6aff6810214000689a14400064
timestamp: 2023-03-07 11:11:41

Version Info:

0: [No Data]

Trojan:Win32/Spysnake.MAB!MTB also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.Zbot.lx9X
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Zusy.452363
FireEyeGeneric.mg.a46b4c88398f7b00
ALYacGen:Variant.Zusy.452363
MalwarebytesTrojan.Injector
ZillyaTrojan.Injector.Win32.1635712
SangforTrojan.Win32.Injector.Vsbc
CrowdStrikewin/malicious_confidence_100% (W)
BitDefenderGen:Variant.Zusy.452363
K7GWTrojan ( 0059fd4f1 )
K7AntiVirusTrojan ( 0059fd4f1 )
BitDefenderThetaGen:NN.ZexaCO.36250.aqW@aeHI9cf
VirITTrojan.Win32.Genus.OEQ
CyrenW32/Injector.LOXX-5658
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Injector.ESTM
CynetMalicious (score: 100)
APEXMalicious
KasperskyHEUR:Trojan.Win32.Agent.gen
AlibabaTrojan:Win32/Injector.53e26507
NANO-AntivirusTrojan.Win32.Crypted.jvcdvv
TencentMalware.Win32.Gencirc.10be3734
SophosMal/Generic-S
F-SecureTrojan.TR/Crypt.XPACK.Gen
VIPREGen:Variant.Zusy.452363
TrendMicroTROJ_GEN.R002C0DC923
McAfee-GW-EditionRDN/Generic.dx
EmsisoftGen:Variant.Zusy.452363 (B)
JiangminTrojan.Agent.emvo
AviraTR/Crypt.XPACK.Gen
MAXmalware (ai score=84)
Antiy-AVLTrojan/Script.Phonzy
MicrosoftTrojan:Win32/Spysnake.MAB!MTB
ArcabitTrojan.Zusy.D6E70B
ZoneAlarmHEUR:Trojan.Win32.Agent.gen
GDataGen:Variant.Zusy.452363
GoogleDetected
AhnLab-V3Trojan/Win.Generic.R561232
McAfeeRDN/Generic.dx
DeepInstinctMALICIOUS
VBA32BScope.Trojan.Loader
Cylanceunsafe
PandaTrj/GdSda.A
TrendMicro-HouseCallTROJ_GEN.R002C0DC923
RisingTrojan.Injector!1.E36D (CLASSIC)
YandexTrojan.Igent.bZJJo8.7
IkarusTrojan.Win32.Injector
MaxSecureTrojan.Malware.771626.susgen
FortinetW32/Injector.ESTE!tr
AVGWin32:InjectorX-gen [Trj]
AvastWin32:InjectorX-gen [Trj]

How to remove Trojan:Win32/Spysnake.MAB!MTB?

Trojan:Win32/Spysnake.MAB!MTB removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment