Bird_banner_small4
Trojan.MSIL.Pastmonth.A
TSL ID TSL20170808-01
Severity Moderate
Description

Trojan.MSIL.Pastmonth.A is a ransomware Trojan that targets Windows platform. This malware encrypts the user's personal files with a randomly generated encryption key. It then informs the user about the file encryption and asks for a ransom to recover the files. Moreover, the malware sends the system and files information to a remote server via HTTP or SMTP.

Affected Products
  • Microsoft Windows All Versions
File Hashes
MD5:
  • B8AA57C597962FCC367D32889D9E64B8
SHA1:
  • 416FE6349FF38FA85ACC9FB9DB651C6DB91F95AD
Identifiers
McAfee
  • RDN/RANSOM
Microsoft Malware Protection Center
Sophos
  • TROJ/RANSOM-EPZ
Symantec
  • RANSOM.CRYPTXXX
TrendMicro
AegisLab
  • TROJ.GENERICKD!C
Arcabit
  • TROJAN.GENERIC.D5784B9
Avira
  • TR/GENASOM.SKJGI
BitDefender
  • TROJAN.GENERICKD.5735609
Cyren
  • W32/TROJAN.RJRV-8391
ESET-NOD32
  • MSIL/FILECODER.JB
K7AntiVirus
  • TROJAN(005137981)
NANO-Antivirus
  • TROJAN.WIN32.GENASOM.EROHXK
Rising
  • RANSOM.GENASOM!8.293
ViRobot
  • TROJAN.WIN32.S.AGENT.28672.FRH
References http://www.virusradar.com/en/MSIL_Filecoder.JB/description
Related Threats