Trojan

UDS:Trojan.MSIL.Vasal (file analysis)

Malware Removal

The UDS:Trojan.MSIL.Vasal is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What UDS:Trojan.MSIL.Vasal virus can do?

  • Detected script timer window indicative of sleep style evasion
  • Reads data out of its own binary image
  • A process created a hidden window
  • A scripting utility was executed
  • Network activity detected but not expressed in API logs

Related domains:

z.whorecord.xyz
a.tomx.xyz

How to determine UDS:Trojan.MSIL.Vasal?


File Info:

crc32: 28F13D50
md5: ebcccfc106a1f71ab52106f5543aacad
name: EBCCCFC106A1F71AB52106F5543AACAD.mlw
sha1: 05e63fc87d88ba1c04bb54903334e4db2261d020
sha256: 7eea4ee003b10d01da403ee9b8d4f88a233fa453567d876ac47984a723dffbbe
sha512: 4635b7b7737cd310d7fd9e4fca5630f1ce22fc25c12bd28bc1482961bf1bd884a7bf08574a4fd73e7793441e4f9a978f99e6c8b7c8b0aeed97e4c1fee50bbd2b
ssdeep: 12288:0Qnk3GDYKGcblwtX+t4Y8BbuUj//zBEsf6gaILrfVkzBtl8kv:IAOcZwXYonzxrLrKzBtlP
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:

0: [No Data]

UDS:Trojan.MSIL.Vasal also known as:

BkavW32.AIDetect.malware2
K7AntiVirusTrojan ( 00569e9c1 )
DrWebTrojan.PWS.Steam.18359
CynetMalicious (score: 100)
CAT-QuickHealTrojan.MsilFC.S15413691
ALYacTrojan.Zmutzy.Lscpt.1
CylanceUnsafe
AlibabaTrojan:MSIL/Vasal.b3253666
K7GWTrojan ( 00569e9c1 )
Cybereasonmalicious.106a1f
CyrenW32/S-536dd2d1!Eldorado
SymantecTrojan.Gen.MBT
ESET-NOD32multiple detections
APEXMalicious
AvastWin32:RATX-gen [Trj]
ClamAVWin.Packed.Uztuby-9631893-0
KasperskyUDS:Trojan.MSIL.Vasal.gen
BitDefenderTrojan.Uztuby.17
NANO-AntivirusTrojan.Win32.Vasal.hqaoxv
MicroWorld-eScanTrojan.Uztuby.17
TencentMsil.Trojan.Vasal.Anzo
Ad-AwareTrojan.Uztuby.17
SophosMal/Generic-S
ComodoMalware@#44n0za42f19u
BitDefenderThetaGen:NN.ZemsilF.34294.Tm0@aCMVPV
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Generic.jc
FireEyeGeneric.mg.ebcccfc106a1f71a
EmsisoftTrojan.Uztuby.17 (B)
SentinelOneStatic AI – Malicious SFX
AviraTR/Spy.Agent.nclty
eGambitUnsafe.AI_Score_91%
Antiy-AVLTrojan/Generic.ASMalwS.30C030A
MicrosoftBackdoor:Win32/Bladabindi!ml
GDataIL:Trojan.MSILZilla.6227
McAfeeArtemis!EBCCCFC106A1
MAXmalware (ai score=88)
VBA32Malware-Cryptor.MSIL.AgentTesla.Heur
MalwarebytesBackdoor.Bot
PandaTrj/CI.A
IkarusTrojan.MSIL.Spy
MaxSecureWin.MxResIcn.Heur.Gen
FortinetW32/Uztuby.17!tr
AVGWin32:RATX-gen [Trj]
Paloaltogeneric.ml

How to remove UDS:Trojan.MSIL.Vasal?

UDS:Trojan.MSIL.Vasal removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment