Categories: Trojan

Should I remove “Trojan:Win32/Trickbot.AB!MTB”?

The Trojan:Win32/Trickbot.AB!MTB is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan:Win32/Trickbot.AB!MTB virus can do?

Behavioural detection: Executable code extraction – unpacking
Creates RWX memory
Possible date expiration check, exits too soon after checking local time
Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
Authenticode signature is invalid
Uses Windows utilities for basic functionality
Anomalous binary characteristics

How to determine Trojan:Win32/Trickbot.AB!MTB?


File Info:
name: F5738F2A6AE10FFDBF2E.mlwpath: /opt/CAPEv2/storage/binaries/13e14f324a380f59e9f693094fbee31dbe5c47f6f56732a96e275015a264ca96crc32: D379EE15md5: f5738f2a6ae10ffdbf2e10935774f87bsha1: 67501c8c78bbe579da024a355ffda8ae8a27426dsha256: 13e14f324a380f59e9f693094fbee31dbe5c47f6f56732a96e275015a264ca96sha512: 889bbbc26140326f7adf0a675ce1a832fd0f72d1311eda5bef78ad3b6246c6c6832127b25cc030a50d943b71393bcf0223985762b7a67bf6d6df6504fc463185ssdeep: 12288:OQNFtqgBst6sev1QKI8BjI/Mf6KJ4N6aXf6XOu8O2ozfixQIhqSwLuWr:kgByg9fIyjso2TXfTJHkfDIhqmWrtype: PE32 executable (DLL) (GUI) Intel 80386, for MS Windowstlsh: T1DD947C6E94580348F68F6FFECC2D6FEEF599BA923B01911D926A29C78B2137FC401511sha3_384: 09b3a8d1858bba85cc3a4413164c7a116582c25b4fc6f8a998b9e9f0624f192164d4b3d1752bd42501e7938f533dd931ep_bytes: 558bec83ec188b450c8945f4837df401timestamp: 2021-11-18 08:39:05
Version Info:
0: [No Data]

Trojan:Win32/Trickbot.AB!MTB also known as:

MicroWorld-eScan	Trojan.GenericKDZ.80412
FireEye	Trojan.GenericKDZ.80412
CAT-QuickHeal	Trojan.ConvagentPMF.S24877890
ALYac	Trojan.GenericKDZ.80412
Cylance	Unsafe
Zillya	Trojan.Convagent.Win32.7760
K7GW	Trojan ( 0058ab1e1 )
K7AntiVirus	Trojan ( 0058ab1e1 )
Cyren	W32/TrickBot.GZ.gen!Eldorado
ESET-NOD32	a variant of Win32/Kryptik.HNKT
APEX	Malicious
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Trojan.GenericKDZ.80412
Avast	Win32:BotX-gen [Trj]
Ad-Aware	Trojan.GenericKDZ.80412
Sophos	Troj/Trickb-DM
DrWeb	Trojan.Trick.46920
McAfee-GW-Edition	Trickbot-FUBI!F5738F2A6AE1
Emsisoft	Trojan.Crypt (A)
Ikarus	Trojan-Spy.Win32.TrickBot
Antiy-AVL	Trojan/Generic.ASMalwS.34D6B0B
Microsoft	Trojan:Win32/Trickbot.AB!MTB
GData	Win32.Trojan.PSE.4MYCK3
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.FUBI.R451717
McAfee	Trickbot-FUBI!F5738F2A6AE1
MAX	malware (ai score=89)
VBA32	Trojan.Convagent
Malwarebytes	Trojan.MalPack
Yandex	Trojan.Kryptik_AGen!ctruSyjZ8lU
SentinelOne	Static AI – Suspicious PE
AVG	Win32:BotX-gen [Trj]
MaxSecure	Trojan.Malware.109653022.susgen